Enabling CLI Timestamping 30
Configuring CLI Confirmation Prompts 30
Enabling Automatic Confirmation 30
Requiring Confirmation for autoconfirm and configure Commands 31
Requiring Confirmation for Specific Exec Mode Commands 31
Configuring System Administrative Users 32
User Name Character Restrictions 33
Configuring Context-level Administrative Users 33
Configuring Context-level Security Administrators 33
Configuring Context-level Administrators 34
Configuring Context-level Operators 34
Configuring Context-level Inspectors 35
Segregating System and LI Configurations 35
Verifying Context-level Administrative User Configuration 36
Configuring Local-User Administrative Users 37
Verifying Local-User Configuration 37
Updating Local-User Database 37
Updating and Downgrading the local-user Database 38
Restricting User Access to a Specified Root Directory 39
Configuring an SFTP root Directory 39
Associating an SFTP root Directory with a Local User 39
Associating an SFTP root Directory with an Administrator 39
Associating an SFTP root Directory with a Config Administrator 40
Configuring TACACS+ for System Administrative Users 40
Operation 40
User Account Requirements 41
TACACS+ User Account Requirements 41
StarOS User Account Requirements 42
Configuring TACACS+ AAA Services 42
Configuring TACACS+ for Non-local VPN Authentication 43
Verifying the TACACS+ Configuration 43
Separating Authentication Methods 44
Disable TACACS+ Authentication for Console 44
Disable AAA-based Authentication for Console 45
Disable TACACS+ Authentication at the Context Level 45
ASR 5500 System Administration Guide, StarOS Release 21.5
v
Contents