HP 6125XLG R2306-HP 6125XLG Blade Switch Fundamentals Command Reference - Page 65
Any rule modification, addition
View all HP 6125XLG manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 65 highlights
• If a predefined user role rule and a user-defined user role rule conflict, the user-defined user role rule takes effect. Any rule modification, addition, or removal for a user role takes effect only on the users that log in with the user role after the change. Access to the file system commands is restricted by both the file system command rules and the file system feature rule. A command with output redirection to the file system is permitted only when the command type write is assigned to the file system feature. When you specify a command string, follow the guidelines in Table 6. Table 6 Command string configuration rules Rule Guidelines Semicolon (;) is the delimiter. Use a semicolon to separate the command of each view that you must enter before you access a command or a set of commands, except for the commands (for example, display and dir) available in user view or any view. Each semicolon-separated segment must have at least one printable character. To specify the commands in a view but not the commands in its subviews, use a semicolon as the last printable character in the last segment. To specify the commands in a view and its subviews, the last printable character in the last segment must not be a semicolon. For example, you must enter system view before you enter interface view. To specify all the commands that start with ip in any interface view, you must use the "system ; interface * ; ip * ;" command string. For another example, the "system ; radius scheme * ;" command string represents all the commands that start with radius scheme in system view. The "system ; radius scheme *" command string represents all the commands that start with radius scheme in system view and all the commands in RADIUS scheme view. Asterisk (*) is the wildcard. An asterisk represents zero or multiple characters. In a non-last segment, you can use an asterisk only at the end of the segment. In the last segment, you can use an asterisk in any position of the segment. If the asterisk appears at the beginning, you cannot specify any printable characters behind it. For example, the "system ; *" command string represents all the commands available in system view and all its subviews, and the "debugging * event" command string represents all event debugging commands available in user view. Keyword abbreviation is allowed. You can specify a keyword by entering its first few characters. Any command that starts with this character string matches the rule. For example, "rule 1 deny command dis mpls lsp protocol static" denies access to the commands display mpls lsp protocol static and display mpls lsp protocol static-cr. 58