cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
796
Views
0
Helpful
1
Replies

AAA CatOS

lejack99
Level 1
Level 1

I need to allow some users to set the port vlan but restricting them to create the vlan. This is what I want to achieve..

set vlan <All Vlan> <All modules>/<All ports>

currently, I am permitting (permit vlan *) as a temp solution for them to do their job. But I am concerning they might do a set vlan xx.

Please advice.

permit vlan

1 Reply 1

didyap
Level 6
Level 6

The document Securing Networks with Private VLANs and VLAN Access Control Lists has more information on Vlan security.

http://www.cisco.com/warp/public/473/90.shtml