Juniper QFX3000-G QFabric, Руководство по развертыванию, Страница: 401 / 652

Requirements
This example uses the following hardware and software components:
•
One QFX3000-G QFabric system containing:
•
Two QFX3100 Director devices
• Two QFX3008-I Interconnect devices
• Eight QFX3500 Node devices
•
Junos OS Release 12.2 for these QFX Series components
•
Eight EX4200 switches, used to make two redundant Virtual Chassis with four members
apiece
• Junos OS Release 12.1R1.9 for the EX Series switches used in the Virtual Chassis
Before you begin:
• Perform the initial setup of the QFabric system on the Director group, which includes
the creation of a username and password for the QFabric system components. See
“Performing the QFabric System Initial Setup on a QFX3100 Director Group” on page 362 .
Overview
The QFabric system offers three special preset login classes that provide different levels
of access to individual components within a QFabric system (such as Node devices and
Interconnect devices). The
qfabric-admin class provides the ability to log in to individual
QFabric system components and manage them. The qfabric-operator class enables the
user to log in to individual components and view component-level operations and
configurations. The
qfabric-user class prevents access to individual QFabric system
components.
You include these classes in your configuration at the
[edit system login user username
authentication remote-debug-permission]
hierarchy level. The key task is to decide which
class you should apply to users based on their need to access QFabric system
components.
NOTE: To set QFabric system login classes for a root user, include the
remote-debug-permission
statement at the
[edit system root-authentication]
hierarchy level and specify the qfabric-admin class.
If you assign the qfabric-admin or the qfabric-operator class to a user, the QFabric system
maps the user to a list of authorized users who are permitted to access components. To
facilitate ease of use, the QFabric system uses the component password you specified
during the initial setup of the Director group. When users assigned the qfabric-admin or
the qfabric-operator class log in to a component by issuing the
request component login
operational mode command, the QFabric system verifies the class and sends the
375 Copyright © 2015, Juniper Networks, Inc.
Chapter 17: QFabric System Configuration