Security
7705 SAR OS System Management Guide Page 109
Parameters entry-id — an entry-id uniquely identifies a user profile command match criteria and a corresponding
action. If more than one entry is configured, the entry-ids should be numbered in staggered
increments to allow users to insert a new entry without requiring renumbering of the existing
entries.
Values 1 to 9999
action
Syntax action {deny | permit}
Context config>system>security>profile user-profile-name>entry entry-id
Description This command configures the action associated with the profile entry.
Parameters deny — specifies that commands matching the entry command match criteria will be denied
permit — specifies that commands matching the entry command match criteria will be permitted
match
Syntax match command-string
no match
Context config>system>security>profile user-profile-name>entry entry-id
Description This command configures a command or command subtree.
Because the 7705 SAR exits when the first match is found, subordinate levels cannot be modified
with subsequent action commands. More specific action commands should be entered with a lower
entry number or in a profile that is evaluated prior to this profile.
All commands below the hierarchy level of the matched command are denied.
The no form of this command removes a match condition.
Default No match command string is specified.
Parameters command-string — the CLI command or CLI tree level that is the scope of the profile entry
To Next Page
Loading...
