Per Port Initial Role Use the command aaa port-access <port-list> initial-role <role-name> to configure initial role at per port level. aaa port-access initial-role