Vsan Policy Deny - Cisco MDS 9000 series Command Reference Manual

Hide thumbs Also See for MDS 9000 series:

Table of Contents

vsan policy deny

S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

vsan policy deny

To configure a vsan-based role, use the vsan policy deny command in configuration mode. Use the no

form of this command to delete a configured role.

Syntax Description

vsan vsan-id

Command Modes

Configuration mode—role name submode.

Command History

Usage Guidelines

You can configure a role so that it only allows commands to be performed for a selected set of VSANs.

By default, the VSAN policy of a role is permit. In other words, the role can perform commands

configured by the rule command in all VSANs. In order to selectively allow VSANs for a role, the

VSAN policy needs to be set to deny and then the appropriate VSANs need to be permitted.

The following example places you in sangroup role submode.

switch# config t

switch(config)# role name sangroup

switch(config-role)#

The following example changes the VSAN policy of this role to deny and places you in a submode where

VSANs can be selectively permitted.

switch(config)# vsan policy deny

switch(config-role-vsan)

The following example deletes the configured VSAN role policy and reverts to the factory default

switch(config-role)# no vsan policy deny

The following example permits this role to perform the allowed commands for VSANs 10 through 30.

Cisco MDS 9000 Family Command Reference

vsan policy deny

permit vsan vsan-id

vsan policy deny

no permit vsan vsan-id

no vsan policy deny

Remove commands from the role.

Specifies the VSAN ID. The range is 1 to 4093.

Modification

This command was introduced.

OL-8413-07, Cisco MDS SAN-OS Release 3.x