[c-nsp] Switchport trunk allowed issues

Saku Ytti saku at ytti.fi
Wed Apr 17 09:06:31 EDT 2013


On 17 April 2013 14:08, amir agha <monitor64 at yahoo.com> wrote:

Hi Ami,


> However, if one forgets to include the <add/remove/all/except/none> keyword, the command defaults to replace:
>
> switchport trunk allowed vlan <range>
>
> the VLAN that has already been placed on vlan deleted and result in downtime

Many have solved same problem in TACACS.

                permit "trunk allowed vlan add.*"
                permit "trunk allowed vlan remove.*"
                permit "trunk allowed vlan all.*"
                permit "trunk allowed vlan none.*"
                permit "trunk allowed vlan except.*"
                deny "trunk allowed vlan .*"


--
  ++ytti


More information about the cisco-nsp mailing list