Creating Feature Groups; Changing User Role Interface Policies - Cisco N5010P-N2K-BE Software Configuration Manual

Chapter 22 Configuring User Accounts and RBAC
S e n d f e e d b a c k t o n x 5 0 0 0 - d o c f e e d b a c k @ c i s c o . c o m

Creating Feature Groups

To create feature groups, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# role feature-group
group-name
Step 3
switch(config-role-featuregrp)# exit
Step 4
switch(config)# show role feature-group
Step 5
switch(config)# copy running-config
startup-config

Changing User Role Interface Policies

You can change a user role interface policy to limit the interfaces that the user can access. To change a
user role interface policy, perform this task:
Command
Step 1
switch# configure terminal
Step 2
switch(config)# role name role-name
Step 3
switch(config-role)# rule number permit
command configure terminal ; interface *
Step 4
switch(config-role)# interface policy
deny
Step 5
switch(config-role-interface)# permit
interface interface-list
Step 6
switch(config-role-interface)# exit
Step 7
switch(config-role)# show role
Step 8
switch(config-role)# copy running-config
startup-config
OL-16597-01
Purpose
Enters configuration mode.
Specifies a user role feature group and enters role
feature group configuration mode.
The group-name argument is a case-sensitive,
alphanumeric character string with a maximum length
of 32 characters.
Exits role feature group configuration mode.
(Optional) Displays the role feature group
configuration.
(Optional) Copies the running configuration to the
startup configuration.
Purpose
Enters configuration mode.
Specifies a user role and enters role configuration
mode.
Configures a command rule to allow access to all
interfaces.
Enters role interface policy configuration mode.
Specifies a list of interfaces that the role can access.
Repeat this command for as many interfaces as
needed.
For this command, you can specify Ethernet
interfaces, Fibre Channel interfaces and virtual Fibre
Channel interfaces.
Exits role interface policy configuration mode.
(Optional) Displays the role configuration.
(Optional) Copies the running configuration to the
startup configuration.
Cisco Nexus 5000 Series Switch CLI Software Configuration Guide
Configuring RBAC
22-7