HP Firewall Configuring user privilege and command levels

Character	Meaning	Examples
	Matches character1character2.
character1\w	character2 must be a number, letter,	"v\w" matches "vlan" ("v" is character1 and "l" is
	or underline, and \w equals	character2) and "service" ( "i" is character2).
	[A-Za-z0-9_].
		"\Wa" matches "-a", with "-" being character1,
\W	Equals \b.	and "a" being character2, but does not match "2a"
		or "ba".

Escape character. If a special

\character listed in this table follows \, the specific meaning of the character is removed.

"\\" matches a string containing "\", "\^" matches a string containing "^", and "\\b" matches a string containing "\b".

The following are several regular expression examples:

#Use begin user-interface in the display current-configuration command to match the first line of output that contains user-interface to the last line of output.

<Sysname> display current-configuration begin user-interface user-interface con 0

user-interface vty 0 4 authentication-mode none user privilege level 3

#

return

#Use exclude Direct in the display ip routing-table command to filter out direct routes and display only the non-direct routes.

<Sysname> display ip routing-table exclude Direct Routing Tables: Public

Destination/Mask	Proto	Pre	Cost	NextHop	Interface
1.1.1.0/24	Static	60	0	192.168.0.0	Vlan1

# Use include Vlan in the display ip routing-table command to filter in route entries that contain Vlan.

<Sysname> display ip routing-table include Vlan Routing Tables: Public

Destination/Mask	Proto	Pre	Cost	NextHop	Interface
192.168.1.0/24	Direct	0	0	192.168.1.42	Vlan999

Configuring user privilege and command levels

To avoid unauthorized access, the device defines the user privilege levels and command levels in Table 28. User privilege levels correspond to command levels. A user logged in with a specific privilege level can use only the commands at that level or lower levels.

132