HP E4510-48G, Command Reference Manual

Page: 629 / 1334

1-14
Default Level
3: Manage level
Parameters
acl : Specifies the authorized ACL of the local user(s).
acl-number : Authorized ACL for the local user(s), in the range 2000 to 5999.
callback-number : Specifies the authorization PPP callback number of the local user(s).
callback-number : Authorization PPP callback number for the local user(s), a case-sensitive string of 1
to 64 characters.
idle-cut : Specifies the idle cut function for the local user(s). With the idle cut function enabled, an
online user whose idle period exceeds the specified idle time will be logged out.
minute : Idle time allowed, in the range 1 to 120 minutes.
level : Specifies the level of the local user(s).
level : Level of the local user(s), which can be 0 for visit level, 1 for monitor level, 2 for system level, and
3 for manage level. A smaller number means a lower level. The default is 0.
user-profile : Specifies the authorization user profile of the local user(s).
profile-name : Name of the authorization user profile for the local user(s), a case-sensitive string of 1 to
32 characters. It can consist of English letters, digits, and underlines and must start with an English
letter.
vlan : Specifies the authorized VLAN of the local user(s).
vlan-id : Authorized VLAN for the local user(s), in the range 1 to 4094.
work-directory : Specifies the authorized work directory of the local user(s), if the user or users are
authorized the FTP or SFTP service type.
directory-name : Authorized work directory, a case-insensitive string of 1 to 135 characters. This
directory must already exist.
Description
Use the authorization-attribute command to configure authorization attributes for the local user or
user group. After the local user or a local user of the user group passes authentication, the device will
assign these attributes to the user.
Use the undo authorization-attribute command to remove authorization attributes.
By default, no authorization attribute is configured for a local user or user group.
Note that:
z
Every configurable authorization attribute has its definite application environments and purposes.
However, the assignment of local user authorization attributes does not take the service type into
account. Therefore, when configuring authorization attributes for a local user, consider what
attributes are needed.
z
Authorization attributes configured for a user group are effective on all local users of the group.
z
An authorization attribute configured in local user view takes precedence over the same attribute
configured in user group view.
z
If you specify to perform no authentication or perform password authentication, the levels of
commands that a user can access after login depends on the level of the user interface. For
information about user interface login authentication method, refer to the authentication-mode