User Management Commands
Page 170 7450 ESS System Mangement Guide
User Management Commands
access
Syntax [no] access [ftp] [snmp] [console] [li] [netconf]
Context config>system>security>user
config>system>security>user-template
Description This command grants a user permission for FTP, SNMP, console or lawful intercept (LI) access.
If a user requires access to more than one application, then multiple applications can be specified in a
single command. Multiple commands are treated additively.
The no form of command removes access for a specific application.
no access denies permission for all management access methods. To deny a single access method,
enter the no form of the command followed by the method to be denied, for example, no access FTP
denies FTP access.
Default No access is granted to the user by default.
Parameters ftp — Specifies FTP permission.
snmp — Specifies SNMP permission. This keyword is only configurable in the
config>system>security>user context.
console — Specifies console access (serial port or Telnet) permission.
li — Allows user to access CLI commands in the lawful intercept (LI) context.
netconf — Allows the user defined in the specified user context to access NETCONF sessions. The
user must also have console access permissions configured to operate with NETCONF.
authentication
Syntax authentication {[none] | [[hash] {md5 key-1 | sha key-1} privacy {none|des-key|aes-128-
cfb-key key-2}]
Context config>system>security>user>snmp
Description This command configures the authentication and encryption method the user must use in order to be
validated by the router. SNMP authentication allows the device to validate the managing node that
issued the SNMP message and determine if the message has been tampered.
The keys configured in this command must be localized keys (MD5 or DES hash of the configured
SNMP engine-ID and a password). The password is not directly entered in this command (only the
localized key).
Default authentication none - No authentication is configured and privacy cannot be configured.
Parameters none — Do not use authentication. If none is specified, then privacy cannot be configured.