[j-nsp] Is it possible to upload running-configuration automatically by E1440?
Joe Shen
sj_hznm at yahoo.com.cn
Wed Jul 2 11:28:18 EDT 2008
there is not TACACS+ server used in our network.
So, is it possible to upload running-configurion
automatically to backup server by ERX1440 ?
Joe
> Joe Shen <sj_hznm at yahoo.com.cn> writes:
>
> > we are trying to set up ERX1440/E320
> configuration
> > backup and monitoring system. The system is
> > implemented to fetch E320/E1440 configuration file
> > every day.
> >
> > In order to confirm system security, the login
> > account should ONLY be able to fech E1440/E320
> > configuration file. No privilege on configuration
> > modification should be granted.
> >
> > Is that possible to implement above on
> E1440/E320?
>
> Don't think so. These are the access levels you can
> play with:
>
http://www.juniper.net/techpubs/software/erx/junose91/swconfig-system-basics/html/passwords-security-config9.html
>
> > Or, is it possible to fetch configuation file by
> RO
> > SNMP community?
>
> You can probably create a limited view covering the
> Juniper-FILE-XFER-MIB and Juniper-HOST-MIB (and
> more?) and restrict RW
> access to it.
>
> But I don't think you'll gain any *real* security.
>
>
>
> Bjørn
>
___________________________________________________________
ÑÅ»¢ÓÊÏ䣬ÄúµÄÖÕÉúÓÊÏ䣡
http://cn.mail.yahoo.com/
More information about the juniper-nsp
mailing list