Cisco ASR 5000, Руководство администратора, Страница: 84 / 466

privilege levels are stored as Attribute Value Pairs (AVPs) in the network's server
database. Users are restricted to the set of commands associated with their privilege level. A mapping of
privilege levels to ASR 5x00 CLI administrative roles and responsibilities is provided in the
table below.
Important
To display the default mapping of privilege levels to CLI administrative roles, run the Exec mode
show tacacs priv-lvl
command. The default mapping varies based on the StarOS release and build type.
priv-levels can be reconfigured from their default StarOS authorization values via the
Configuration mode
priv-lvl and user-id commands. For additional information, see the
Configuration Mode Commands chapter of the Command Line Interface Reference .
In release 20.0 and higher Trusted StarOS builds, FTP is not supported.
Important
StarOS User Account Requirements
users who are allowed administrative access to the system must have the following user account
information defined in StarOS:
• username
• password
• administrative role and privileges
For instructions on defining users and administrative privileges on the system, refer to Configuring System
Administrative Users .
Important
Configuring AAA Services
This section provides an example of how to configure AAA services for administrative users on
the system.
When configuring AAA services for the first time, the administrative user must use
non- services to log into the ASR 5x00. Failure to do so will result in the user being
denied access to the system.
Caution
Log in to the system using non- services.
Use the example below to configure AAA services on the system:
configure
tacacs mode
server priority priority_number ip-address srvr_ip_address
end
ASR 5000 System Administration Guide, StarOS Release 21.1
56
System Settings
Configuring AAA Services