[j-nsp] ERX1440, how to limit login to be able to "show conf" only

Nitin Vig nitinvig at juniper.net
Wed Jul 2 06:07:28 EDT 2008


Hi,

>  we are trying to set up ERX1440/E320 configuration
> backup and monitoring  system. The system is
> implemented to fetch E320/E1440 configuration file
> every day.

>   In order to confirm system security, the login
> account should ONLY be able to fech E1440/E320
> configuration file. No privilege on configuration
> modification should be granted. 

>   Is that possible to implement above on E1440/E320?

This can be achieved if you are using TACACS for authorization. 2 examples:

http://www.juniper.net/kb/viewka.jsp?txtKANumber=16359

http://www.juniper.net/kb/viewka.jsp?txtKANumber=23063

-- Nitin
-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Joe Shen
Sent: Wednesday, July 02, 2008 5:46 AM
To: juniper-nsp at puck.nether.net
Subject: [j-nsp] ERX1440, how to limit login to be able to "show conf" only

hi,

  we are trying to set up ERX1440/E320 configuration
backup and monitoring  system. The system is
implemented to fetch E320/E1440 configuration file
every day.

  In order to confirm system security, the login
account should ONLY be able to fech E1440/E320
configuration file. No privilege on configuration
modification should be granted. 

  Is that possible to implement above on E1440/E320?

  Or, is it possible to fetch configuation file by RO
SNMP community?   

 thanks in advance.

Joe

  


      ___________________________________________________________ 
 雅虎邮箱,您的终生邮箱! 
http://cn.mail.yahoo.com/
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


More information about the juniper-nsp mailing list