Permit Vlan - Cisco Nexus 7000 Series Command Reference Manual

P Commands

permit vlan

To permit VLANs for a user role VLAN policy, use the permit vlan command. To remove VLANs, use the
no form of this command.
permit vlan {vlan-id [-vlan-id2]| vlan-list}
no permit vlan
Syntax Description
vlan-id
- vlan-id2
vlan-list
Command Default
All VLANs
Command Modes
User role VLAN policy configuration
Command History
Release
4.0(1)
Usage Guidelines
The vlan policy deny command denies a user role access to all VLANs except for those that you allow with
the permit vlan command.
This command does not require a license.
Examples This example shows how to permit a VLAN identifier for a user role VLAN policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 8
This example shows how to permit a range of VLAN identifiers for a user role VLAN policy:
switch# configure terminal
switch(config)# role name MyRole
switch(config-role)# vlan policy deny
switch(config-role-vlan)# permit vlan 1-8
This example shows how to permit a list of VLAN identifiers for a user role VLAN policy:
switch# configure terminal
switch(config)# role name MyRole
VLAN identifier. The range is 1-3967 and 4048-4093.
Last VLAN identifier in a range. The VLAN identifier
must be greater than the first VLAN identifier in the
range.
Comma-separated list of VLAN identifiers.
Modification
This command was introduced.
Cisco Nexus 7000 Series Security Command Reference
permit vlan
579