Use the policy-invalid-action command to configure the global invalid policy action. The policy-invalid-action command is accessible from the vnsmode:adminctr context of the CLI.
default | Sets the global invalid policy action to the default. |
allow | Sets the global invalid policy action to allow an invalid policy. |
deny | Sets the global invalid policy action to deny an invalid policy. |
The following example sets policy-invalid-action behavior to deny:
EWC.extremenetworks.com:vnsmode:adminctr# policy-invalid-action deny