
To do… | Use the command… | Remarks | ||
Enable the current user interface to |
| Optional | ||
protocol inbound { all ssh } | By default, Telnet and SSH are | |||
support SSH | ||||
| supported. | |||
|
| |||
|
|
| ||
|
| Optional | ||
|
| • | By default, command | |
|
|
| authorization is not enabled. | |
|
| • By default, command level for a | ||
|
|
| login user depends on the user | |
|
|
| privilege level. The user is | |
|
|
| authorized the command with | |
|
|
| the default level not higher than | |
|
|
| the user privilege level. With | |
Enable command authorization | command authorization |
| the command authorization | |
| configured, the command level | |||
|
|
| ||
|
|
| for a login user is determined | |
|
|
| by both the user privilege level | |
|
|
| and AAA authorization. If a | |
|
|
| user executes a command of | |
|
|
| the corresponding command | |
|
|
| level, the authorization server | |
|
|
| checks whether the command is | |
|
|
| authorized. If yes, the | |
|
|
| command can be executed. | |
|
|
| ||
|
| Optional | ||
|
| • | By default, command | |
|
|
| accounting is disabled. The | |
|
|
| accounting server does not | |
|
|
| record the commands executed | |
|
|
| by users. | |
|
| • | Command accounting allows | |
|
|
| the HWTACACS server to | |
|
|
| record all executed commands | |
|
|
| that are supported by the | |
|
|
| device, regardless of the | |
Enable command accounting | command accounting |
| command execution result. This | |
| helps control and monitor user | |||
|
|
| operations on the device. If | |
|
|
| command accounting is | |
|
|
| enabled and command | |
|
|
| authorization is not enabled, | |
|
|
| every executed command is | |
|
|
| recorded on the HWTACACS | |
|
|
| server. If both command | |
|
|
| accounting and command | |
|
|
| authorization are enabled, only | |
|
|
| the authorized and executed | |
|
|
| commands are recorded on the | |
|
|
| HWTACACS server. | |
|
|
|
| |
Exit to system view | quit | — |
| |
|
|
|
|
49