Juniper JUNOSE 11.3, Руководство по настройке

Страница: 461 / 632

disconnect ssh
•
Use to terminate an active SSH session.
•
Use the show ip ssh command to determine the session identifier for the session to
terminate.
•
Example
host1(config)# disconnect ssh 12
NOTE: You can also use the clear line vty terminal command to terminate
SSH sessions. In that case, use the show users command to determine the
virtual terminal number to specify with the clear line vty terminal command.
•
There is no no version.
•
See disconnect ssh.
Restricting User Access
Users who are authenticated through RADIUS or can be restricted to certain
sets of commands and virtual routers (VRs). The levels of access are shown in Table 46
on page 431. For information about , see
JunosE Broadband Access Configuration
Guide .
Table 46: CLI User Access Levels
Commands Available Access Level
disable , enable , exit , and help commands 0
Level 0 commands and all other commands available in User Exec mode 1
Level 1 commands and all Privileged show commands 5
All commands except support and privilege change commands 10
Commands that Juniper Networks Technical Support may provide and all other
commands 15
Restricting Access to Commands with RADIUS
You can use RADIUS authentication to specify a level of commands that a user is allowed.
If you do not configure RADIUS authentication for the console or virtual terminals, all
users who successfully log in are automatically granted Level 1 access.
The vendor-specific attribute (VSA) Admin-Auth-Level supports the levels of access
shown in Table 46 on page 431. In addition to VSA access level support, the software
provides access to levels 1 and 10 through the Initial-Auth-Level in the standard RADIUS
431 Copyright © 2010, Juniper Networks, Inc.
Chapter 7: Passwords and Security