HP Enterprise FlexNetwork 10500 Series, Configuration Manual

Page: 32 / 325

23
Step Command Remarks
3. Configure rules for
the user role.
•
Configure a command rule:
rule number { deny | permit }
command command-string
•
Configure a feature rule:
rule number { deny | permit }
{ execute | read | write } * feature
[ feature-name ]
•
Configure a feature group rule:
rule number { deny | permit }
{ execute | read | write } *
feature-group feature-group-name
•
Configure a Web menu rule:
rule number { deny | permit }
{ execute | read | write } *
web-menu [ web-string ]
•
Configure an XML element rule:
rule number { deny | permit }
{ execute | read | write } *
xml-element [ xml-string ]
•
Configure an OID rule:
rule number { deny | permit }
{ execute | read | write } * oid
oid-string
By default, a user-defined user role
does not have any rule or access to
any command, Web page, XML
element, or MIB node.
Repeat this step to add a maximum
of 256 rules to the user role.
IMPORTANT:
When you configure feature rules,
you can specify only features
available in the system. Enter
feature names the same as the
feature names are displayed,
including the case.
Configuring a feature group
Use feature groups to bulk assign command access permissions to sets of features. In addition to
the predefined feature groups, you can create a maximum of 64 custom feature groups and assign a
feature to multiple feature groups.
To configure a feature group:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a feature group
and enter its view.
role feature-group name
feature-group-name
By default, the system has the following
predefined feature groups:
•
L2 —Includes all Layer 2 commands.
•
L3 —Includes all Layer 3 commands.
These two groups are not user
configurable.
3. Add a feature to the
feature group.
feature feature-name
By default, a feature group does not have
any feature.
Repeat this step to add multiple features to
the feature group.
IMPORTANT:
You can specify only features available in
the system. Enter feature names the same
as the feature names are displayed,
including the case.