Juniper QFX3000-G QFabric, Deployment Manual, Page: 403 / 652

Step-by-Step
Procedure
The following example requires that you navigate various levels in the configuration
hierarchy. For instructions on how to do that, see
Using the CLI Editor in Configuration
Mode in the CLI User Guide .
To provide the same access to the QFabric system CLI for all users, but different QFabric
system component-level access to different users:
1.
Define and provide all-qfabric access and passwords to all three users. This
administrator-defined class provides full permissions, enabling the users to log in
to the QFabric system default partition and use the CLI. Alternatively, you can assign
the super-user class to these users to accomplish the same goal.
[edit]
user@qfabric#
set system login class all-qfabric permissions all
user@qfabric# set system login user Adam class all-qfabric
user@qfabric# set system login user Adam authentication encrypted-password
"$1$aoYSFkvE$G/dYqsTV5iSvVW2sND69U."
user@qfabric# set system login user Oscar class all-qfabric
user@qfabric# set system login user Oscar authentication encrypted-password
"$1$3e.3wJQ8$31SrzV0.efdRbk.ZJncKm0"
user@qfabric# set system login user Ulf class all-qfabric
user@qfabric# set system login user Ulf authentication encrypted-password
"$1$qt9Ncm0o$okNYSN8O4fVITE/SHBdYj0"
2.
Provide qfabric-admin component access to Adam so he can manage QFabric
system components.
[edit]
user@qfabric#
set system login user Adam authentication remote-debug-permission
qfabric-admin
3.
Provide qfabric-operator component access to Oscar so he can view the CLI at the
QFabric system components.
[edit]
user@qfabric#
set system login user Oscar authentication remote-debug-permission
qfabric-operator
4.
Assign qfabric-user component restrictions to Ulf to prevent him from accessing
the QFabric system components.
[edit]
user@qfabric#
set system login user Ulf authentication remote-debug-permission
qfabric-user
Results From configuration mode, confirm your configuration by entering the
show
command. If
the output does not display the intended configuration, repeat the configuration
instructions in this example to correct it.
For brevity, this
show
command output includes only the configuration that is relevant
to this example.
[edit]
system {
login {
class all-qfabric {
377 Copyright © 2015, Juniper Networks, Inc.
Chapter 17: QFabric System Configuration