[j-nsp] allow-command question

Jared Mauch jared at puck.nether.net
Mon Jul 28 12:09:51 EDT 2003


	IMHO, you should never disallow quit.

	ie: juniper should make it always available.

	- jared

On Mon, Jul 28, 2003 at 04:36:09PM +0200, Anton Bernal wrote:
> 
>     allow-commands "(show route)|(quit)";
> 
> 
> At 04:13 PM 7/28/2003 +0200, Nicolas Fevrier wrote:
> >Hi Mourad :))
> >
> >Nop, it doesn't make any noticeable difference (quit or "everything
> >beginning
> >with quit")
> >
> >class VIEW_ROUTE {
> >    idle-timeout 3;
> >    permissions view;
> >    allow-commands "(^show route|^quit)";
> >    deny-commands .*;
> >}
> >
> >viewer_route at PARIS> ?
> >Possible completions:
> >  show                 Show information about the system
> >viewer_route at PARIS> quit
> >                    ^
> >unknown command.
> >viewer_route at PARIS>
> >
> >Rgds,
> >
> >Nicolas.
> >
> ># isn't it
> ># allow-commands "(^show route|^quit)";
> ># deny-commands .*;
> ># instead of
> ># isn't it allow-commands "(^show route|quit)";
> ># deny-commands .*;
> ># R/
> ># Mourad
> >
> >
> >
> >
> >_______________________________________________
> >juniper-nsp mailing list juniper-nsp at puck.nether.net
> >http://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/juniper-nsp

-- 
Jared Mauch  | pgp key available via finger from jared at puck.nether.net
clue++;      | http://puck.nether.net/~jared/  My statements are only mine.


More information about the juniper-nsp mailing list