Permit Vlan - HP 6125XLG Command Reference Manual

[Sysname-vlan10] port ten-gigabitethernet 1/1/9
# Verify that you cannot enter Ten-GigabitEthernet 1/1/6 interface view.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/1/6
Permission denied.
Related commands
display role
•
• interface policy deny
role
•

permit vlan

Use permit vlan to configure a list of VLANs accessible to a user role.
Use undo permit vlan to remove the permission for a user role to access specific VLANs.
Syntax
permit vlan vlan-id-list
undo permit vlan [ vlan-id-list ]
Default
No permitted VLANs are configured in user role interface policy view.
Views
User role VLAN policy view
Predefined user roles
network-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each VLAN item specifies a VLAN
by its VLAN ID or a range of VLANs in the form of vlan-id1 to vlan-id2. The value range for the VLAN IDs
is 1 to 4094. If a VLAN range is specified, vlan-id2 must be greater than vlan-id1.
Usage guidelines
To permit a user role to access a VLAN after you configure the vlan policy deny command, you must add
the VLAN to the permitted VLAN list of the policy. With the user role, you can create, remove, or
configure only the VLANs in the permitted VLAN list, enter their views, and specify them in a feature
command.
You can repeat the permit vlan command to add permitted VLANs to a user role VLAN policy.
The undo permit vlan command removes the entire list of permitted VLANs if no VLAN is specified.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after the
change.
Examples
1. Permit the user role role1 to access VLANs 2, 4, and 50 to 100, and to execute all commands
available in interface view and VLAN view.
<Sysname> system-view
[Sysname] role name role1
61