Permit Vlan - HP Enterprise FlexFabric 12900E Series Command Reference Manual

permit vlan

Use
permit vlan
Use
undo permit vlan
Syntax
permit vlan vlan-id-list
undo permit vlan [ vlan-id-list ]
Default
No permitted VLANs are configured in user role VLAN policy view.
Views
User role VLAN policy view
Predefined user roles
network-admin
Parameters
vlan-id-list
specifies a VLAN by VLAN ID or specifies a range of VLANs in the form of
. The value range for the VLAN IDs is 1 to 4094. If you specify a VLAN range, the value
vlan-id2
for the
vlan-id2
Usage guidelines
To permit a user role to access a VLAN after you configure the
must add the VLAN to the permitted VLAN list of the policy. With the user role, you can perform the
following tasks on the VLANs in the permitted VLAN list:
•
Create, remove, or configure the VLANs.
•
Enter the VLAN views.
•
Specify the VLANs in feature commands.
You can repeat the
policy.
The
undo permit vlan
a VLAN.
Any change to a user role VLAN policy takes effect only on users who log in with the user role after
the change.
By default, all access ports belong to VLAN 1. To assign an access port to any other VLAN by using
the
port access vlan
and the new VLAN.
Examples
1. Configure user role role1:
# Permit user role role1 to execute all commands available in interface view and VLAN view.
<Sysname> system-view
[Sysname] role name role1
[Sysname-role-role1] rule 1 permit command system-view ; interface *
[Sysname-role-role1] rule 2 permit command system-view ; vlan *
# Permit user role role1 to access VLANs 1, 2, 4, and 50 to 100.
[Sysname-role-role1] vlan policy deny
to configure a list of VLANs accessible to a user role.
to remove the permission for a user role to access specific VLANs.
: Specifies a space-separated list of up to 10 VLAN items. Each VLAN item
argument must be greater than the value for the
command to add multiple permitted VLANs to a user role VLAN
permit vlan
command removes the entire list of permitted VLANs if you do not specify
command, make sure you have a user role that can access both VLAN 1
vlan policy deny
29
vlan-id1 to
argument.
vlan-id1
command, you