FAQ-How to Add Commands with Characters or Digits to the command-privilege Command When Upgrading the Rights of Low-level Management Users

Publication Date:  2012-07-27 Views:  109 Downloads:  0
Issue Description
 Q:
How to add commands with characters and digits to the command-privilege command when upgrading the rights of low-level management users? 

 
Alarm Information
 Null 

 
Handling Process
 A:
When using the command-privilege command to upgrade the rights of low-level management users, you usually need to input characters and digits. For example, you may need to create an account and a password, set the description field, enter an interface, and set the IP address. Detailed descriptions are as follows:
1. When inputting characters, you can use any character except the question mark (?).
For example, you can do as follows to create a user account with the level 1 rights in the local AAA server view:
[MA5200G]command-privilege level 1 view shell system-view
[MA5200G]command-privilege level 1 view system local-aaa-server
[MA5200G]command-privilege level 1 view local-aaa-server user x
[MA5200G]command-privilege level 1 view local-aaa-server user x password
[MA5200G]command-privilege level 1 view local-aaa-server user x password cipher
[MA5200G]command-privilege level 1 view local-aaa-server user x password cipher x
[MA5200G]command-privilege level 1 view local-aaa-server quit
Note: The letter "x" indicates the account and password.
2. When adding a command with digits, you can input numbers according to the command format. Before inputting an interface number, ensure that at least one interface number of the same type already exists on the MA5200G.
For example, you can do as follows to enable the management user with level 1 rights to enter an Ethernet interface and set the IP address:
[MA5200G]command-privilege level 1 view system interface
[MA5200G]command-privilege level 1 view system interface ethernet
[MA5200G]command-privilege level 1 view system interface ethernet 8/0/0 (An interface of the same type must have existed on the device.)
[MA5200G]command-privilege level 1 view ethernet ip
[MA5200G]command-privilege level 1 view ethernet ip address
[MA5200G]command-privilege level 1 view ethernet ip address 1.1.1.1
[MA5200G]command-privilege level 1 view ethernet ip address 1.1.1.1 24 (The IP address and mask can be any value that complies with the requirements for IP addresses and masks.)
[MA5200G]command-privilege level 1 view ethernet quit 

 
Root Cause
 Null 

 
Suggestions
 Null 

 

END