Changing User Role Vlan Policies - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Configuring User Accounts and RBAC
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
The following example shows how to change a user role interface policy to limit the interfaces that the user
can access:
switch# configure terminal
switch(config)# role name UserB
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 2/1
switch(config-role-interface)# permit interface fc 3/1
switch(config-role-interface)# permit interface vfc 30/1
You can specify a list of interfaces that the role can access. You can specify it for as many interfaces as needed.

Changing User Role VLAN Policies

You can change a user role VLAN policy to limit the VLANs that the user can access.
Procedure
Step 1
Step 2
Step 3
Step 4
OL-16597-01
Command or Action
switch(config)# role name role-name
switch(config-role)# interface policy
deny
switch(config-role-interface)# permit
interface interface-list
switch(config-role-interface)# exit
switch(config-role)# show role
switch(config-role)# copy
running-config startup-config
Command or Action
switch# configure terminal
switch(config)# role name role-name
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan
vlan-list
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Changing User Role VLAN Policies
Purpose
Specifies a user role and enters role configuration
mode.
Enters role interface policy configuration mode.
Specifies a list of interfaces that the role can access.
Repeat this command for as many interfaces as
needed.
For this command, you can specify Ethernet
interfaces, Fibre Channel interfaces, and virtual Fibre
Channel interfaces.
Exits role interface policy configuration mode.
(Optional)
Displays the role configuration.
(Optional)
Copies the running configuration to the startup
configuration.
Purpose
Enters configuration mode.
Specifies a user role and enters role configuration
mode.
Enters role VLAN policy configuration mode.
Specifies a range of VLANs that the role can
access.
321