Security Command Reference
Page 108 7705 SAR OS System Management Guide
none — sets the default of the profile to no-action. This option is useful to assign multiple profiles to
a user.
For example, if a user is a member of two profiles and the default action of the first profile is
permit-all, then the second profile will never be evaluated because permit-all is executed first.
If the first profile default action is set to none and if no match conditions are met in the first
profile, then the second profile will be evaluated. If the default action of the last profile is none
and no explicit match is found, then the default-action deny-all takes effect.
renum
Syntax renum old-entry-number new-entry-number
Context config>system>security>profile user-profile-name
Description This command renumbers profile entries to resequence the entries.
Since the 7705 SAR exits when the first match is found and executes the actions according to the
accompanying action command, renumbering is useful to rearrange the entries from most explicit to
least explicit.
Parameters old-entry-number — the entry number of an existing entry
Values 1 to 9999
new-entry-number — the new entry number
Values 1 to 9999
Profile Management Entry Commands
entry
Syntax [no] entry entry-id
Context config>system>security>profile user-profile-name
Description This command is used to create a user profile entry.
More than one entry can be created with unique entry-id numbers. The 7705 SAR exits when the first
match is found and executes the actions according to the accompanying action command. Entries
should be sequenced from most explicit to least explicit.
An entry may not have any match criteria defined (in which case, everything matches) but must have
at least the keyword action for it to be considered complete.
The no form of the command removes the specified entry from the user profile.
Default No entry IDs are defined.
To Next Page
Loading...
