User Manual

NETGEAR M4500 Series Switches CLI Command Reference Manual 623
Format no description
Mode Role Interface
5.31.7. rule command
This command is used to add a rule of command string to a role.
⚫ Rule ID is an integer between 1 and 256, and it shall be unique inside one role.
⚫ Maximum length of rule command string is 255 characters.
⚫ Rule command isn't case sensitive and it's converted to lower case automatically. All space characters
put to the head or tail of command string will be deleted, and multiple space characters inside a
command string will convert to a single space character.
⚫ Wildcard character ‘*’ can match any string after prefix string, and it shall put to the tail of command
string.
⚫ Every word inside a command string must be a whole command word, except the last word with
wildcard character ‘*’ could be incomplete, likes “show mac-addr*.
⚫ RBAC doesn't support "No form" format of rule command string, because normal command (e.g.
“shutdown”) and "No form" command (e.g. “no shutdown”) are bonded together to deal with access
permission.
⚫ RBAC Rule command shall not start with keyword "do", because keyword "do" will be removed before a
command is executed.
Format rule <rule-id> <deny | permit> command <command-string>
Default None
Mode Role Interface
5.31.8. no rule (to delete a rule of command string)
This command is used to delete a rule of command string from a role.
Format no rule <rule-id>
Mode Role Interface