R211x-HP Flexfabric 11900 Fundamentals Command Reference

• Enter its view.

• Specify it in a feature command.

Any change to a user role VPN instance policy takes effect only on users who log in with the user role

after the change.

Examples

# Deny the access of user role role1 to any VPN.

<Sysname> system-view

[Sysname] role name role1

[Sysname-role-role1] vpn-instance policy deny

[Sysname-role-role1-vpnpolicy] quit

# Deny the access of user role role1 to any VPN but vpn2.

<Sysname> system-view

[Sysname] role name role1

[Sysname-role-role1] vpn-instance policy deny

[Sysname-role-role1-vpnpolicy] permit vpn-instance vpn2

Related commands

• display role

• permit vpn-instance

• role