[j-nsp] ERX1440, how to limit login to be able to "show conf" only

[Rick Astley]

Have you considered using the archive feature?

ie:

set system archival configuration transfer-interval 1440
set system archival configuration archive-sites "ftp://user:passs@1.1.1.1"

Also,

If you just need a restricted account with permission to only see the
config, you can create a seperate class for it with "view-configuration"
permission. ie:
set system login class backup permissions view-configuration

"secret" permission is optional, see "Configuring Access Privilege Levels"
for more info:
http://www.juniper.net/techpubs/software/junos/junos91/swconfig-system-basics/configuring-access-privilege-levels.html


Rick

2008/7/1 Joe Shen <sj_hznm at yahoo.com.cn>:

> hi,
>
>  we are trying to set up ERX1440/E320 configuration
> backup and monitoring  system. The system is
> implemented to fetch E320/E1440 configuration file
> every day.
>
>  In order to confirm system security, the login
> account should ONLY be able to fech E1440/E320
> configuration file. No privilege on configuration
> modification should be granted.
>
>  Is that possible to implement above on E1440/E320?
>
>  Or, is it possible to fetch configuation file by RO
> SNMP community?
>
>  thanks in advance.
>
> Joe
>
>
>
>
>      ___________________________________________________________
>  雅虎邮箱，您的终生邮箱！
> http://cn.mail.yahoo.com/
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>