Zte ZXR10 2900E Series - Page 242

ZXR102900ESeriesCongurationGuide
CommandFunction
zte(cfg)#privilege<0-15>session<1-1024>{all|
part}<mode><key1-string>[<key2-string>[...<key10-string>]]
Setsthecommandpermission.
zte(cfg)#clearprivilegesession[<1-1024>]Clearsaspeciedcommand
permissionrule.
showprivilege{default|level[<0-15>]|session[<1-1024>]}(for
allcongurationmodes)
Displaysaspeciedcommand
permissionrule.
PrivilegeCongurationInstance
lCongurationDescription
Userscanperformthiscongurationonlywhenloggingintotheswitchwiththehighest
permission(level15).
lCongurationProcedure
Conguretheswitch:
/*Enabletheprivilegefunction*/
zte(cfg)#privilegeenable
/*Grantlevel-12permissiontoallfunctionsofthesetnode*/
zte(cfg)#privilege12session1partcfgset
lCongurationVerication
1.Executethefollowingcommandstocheckthecommandpermissionrule.
zte(cfg)#showprivilegesession
State:Enable
Userlevel:15
SessionLevelTypeModeKey
----------------------------------------------
112partcfgset
2.Logintotheswitchandexecutetherelatedsetcommandasauserwithalower
permission(forexample,level11).
Executethezte(cfg)#setstpenablecommand.Thesystemwillpromptthatthe
userisdisallowedtoexecutethecommand.
Theuserprivilege(level11)islessthancommandprivilege(level12rule1).
%Commandcannotbeperformedbecauseofinsufficientprivilege.(0x40000aab)
Logintotheswitchasauserwithapermissionhigherthanorequaltothe
permission(forexample,level13)andexecutethesamecommand.The
commandcanbeproperlyexecuted,withoutthepromptmentionedabove.
6-12
SJ-20130731155059-002|2013-11-27(R1.0)ZTEProprietaryandCondential