Permit Interface - Cisco Nexus 5500 Series Command Reference Manual

permit interface

permit interface
To add interfaces for a user role interface policy, use the permit interface command. To remove
interfaces, use the no form of this command.
Syntax Description
interface-list
Command Default All interfaces
Command Modes Interface policy configuration mode
Command History Release
5.2(1)N1(1)
Usage Guidelines For permit interface statements to work, you need to configure a command rule to allow interface access,
as shown in the following example:
switch(config-role)# rule number permit command configure terminal ; interface *
Examples This example shows how to configure a range of interfaces for a user role interface policy:
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/2 - 8
This example shows how to configure a list of interfaces for a user role interface policy:
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5
This example shows how to remove an interface from a user role interface policy:
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# no permit interface ethernet 1/2
Related Commands Command
interface policy deny
Cisco Nexus 5500 Series NX-OS Security Command Reference
212
permit interface interface-list
no permit interface
List of interfaces that the user role has permission to access.
Modification
This command was introduced.
Description
Enters interface policy configuration mode for a user role.
Chapter P Commands
OL-27883-02