Permit Interface - Cisco Nexus 7000 Series Command Reference Manual

P Commands

permit interface

To permit interfaces for a user role interface policy, use the permit interface command. To deny interfaces,
use the no form of this command.
permit interface {ethernet slot / port [-port2]| interface-list}
no permit interface
Syntax Description
ethernet slot/port
-port
interface-list
Command Default
All interfaces
Command Modes
User role interface policy configuration
Command History
Release
4.0(1)
Usage Guidelines
The interface policy deny command denies a user role access to all interfaces except for those that you allow
with the permit interface command.
This command does not require a license.
Examples This example shows how to permit a range of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 2/1 - 8
This example shows how to permit a list of interfaces for a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# interface policy deny
switch(config-role-interface)# permit interface ethernet 1/1, ethernet 1/3, ethernet 1/5,
ethernet 1/7
This example shows how to deny an interface in a user role interface policy:
switch# configure terminal
switch(config)# role name MyRole
Specifies the Ethernet interface identifier.
Last interface in a range of interfaces on a module.
Comma-separated list of Ethernet interface
identifiers.
Modification
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
permit interface
577