[j-nsp] allow-command question

Anton Bernal abernal at bigfoot.com
Mon Jul 28 19:48:47 EDT 2003


Try:
permissions view;
allow-commands "(quit)|(show route)";
deny-commands "[^(quit)]";

At 06:16 PM 7/28/2003 +0200, Nicolas Fevrier wrote:
>I've tried this one too :)
>
># De: Anton Bernal [mailto:abernal at bigfoot.com]
>#      allow-commands "(show route)|(quit)";
>
>user toto {
>     uid 2004;
>     class VIEW_ROUTE;
>     authentication {
>         encrypted-password "$1$UAEz9zdM$cY8aooxQDpTz6VKNrgKCz1"; #
>SECRET-DATA
>     }
>}
>class VIEW_ROUTE {
>     idle-timeout 3;
>     permissions view;
>     allow-commands "(show route)|(quit)";
>     deny-commands .*;
>}
>
>toto at PARIS> ?
>Possible completions:
>   show                 Show information about the system
>toto at PARIS> quit
>             ^
>unknown command.
>
>toto at PARIS> exit
>             ^
>unknown command.
>
>toto at PARIS>
>
>
>
>
>
>
>_______________________________________________
>juniper-nsp mailing list juniper-nsp at puck.nether.net
>http://puck.nether.net/mailman/listinfo/juniper-nsp



More information about the juniper-nsp mailing list