In the configuration of the V5 H3C MSR router, including the V7 H3C switch, the AAA local user right can be modified by Authentication-mode level 1/2/3 To modify the user's configuration permissions. In the new MSR Router V7 version, the level option is not available and only the local user rights are configured through user-role
650) this.width=650; "src=" Http://s5.51cto.com/wyfs02/M00/78/43/wKioL1Z5DK6yW17_AAAqEyG8A8s229.png "title=" ori@_ 2js[je9y[@28ibb{jj.png "alt=" Wkiol1z5dk6yw17_aaaqeyg8a8s229.png "/>
Version number is v7.1.059
650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M01/78/44/wKioL1Z5DSngoo-dAABHSiHrUw8874.png "style=" float: none; "title="}) $6y5) I3@UMRT8OGVU7%ED.png "alt=" Wkiol1z5dsngoo-daabhsihruw8874.png "/>
In the User-role option, you can see that there are many roles to configure
650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M02/78/45/wKiom1Z5DSCjSCdVAAAY7ZybY-E580.png "style=" float: none; "title=" Qq20151222164145.png "alt=" Wkiom1z5dscjscdvaaay7zyby-e580.png "/>
Display View role User rights
level-0
650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M02/78/45/wKiom1Z5EILA1MrRAAAj31vGEco501.png "style=" float: none; "title=" Level-0.png "alt=" Wkiom1z5eila1mrraaaj31vgeco501.png "/>
Level-1
650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M01/78/44/wKioL1Z5EJTCHGHBAAAmw6K5fxY768.png "style=" float: none; "title=" Level-1.png "alt=" Wkiol1z5ejtchghbaaamw6k5fxy768.png "/>
Level-2/3/4/5/6/7/8
650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M01/78/45/wKiom1Z5EIOSBZtAAAC4dVgcJ7w365.png "style=" float: none; "title=" Level-2-8.png "alt=" Wkiom1z5eiosbztaaac4dvgcj7w365.png "/>
Level-9
650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M02/78/44/wKioL1Z5EJXQXmkmAAAoaubtsQk405.png "style=" float: none; "title=" Level-9.png "alt=" Wkiol1z5ejxqxmkmaaaoaubtsqk405.png "/>
Level-10/11/12/13/14
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/78/44/wKioL1Z5EJmAOCrXAAC5nPGStFw995.png "style=" float: none; "title=" Level-10-14.png "alt=" Wkiol1z5ejmaocrxaac5npgstfw995.png "/>
Level-15/network-admin
650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M02/78/45/wKiom1Z5EIzgcT1ZAAC3qf1xyKE096.png "style=" float: none; "title=" Level-15.png "alt=" Wkiom1z5eizgct1zaac3qf1xyke096.png "/>
Network-operator
650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M00/78/45/wKiom1Z5EIyifXHCAABO7l3ZuTs158.png "style=" float: none; "title=" Level-op.png "alt=" Wkiom1z5eiyifxhcaabo7l3zuts158.png "/>
It can be summed up from above
√level-0
Executable Commands Ping, tracert, SSH2, Telnet, and super
√level-1
Permissions with the level-0 user role and executable display commands for all functions and resources of the system (except display History-command all)
√level-2-8
√level-10-14
The lack of savings is no authority
√level-9
The majority of functions and all resources in the system can be manipulated, but not the display History-command All command, RBAC commands (except debug commands), file management, device management, and local user features. For local Users, you can modify your password if the user logs on to the system and is granted the role
√level-15
Same as Network-admin permissions
For level2-8 10-14 The default does not turn on the authorization feature
650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/78/44/wKioL1Z5EdGAxgwgAAADqH1wZJk832.png "title=" Role.png "alt=" Wkiol1z5edgaxgwgaaadqh1wzjk832.png "/>
Need to open authorization command
This article is from the "rog91222" blog, make sure to keep this source http://rog91222.blog.51cto.com/9887148/1727274
H3C MSR Router V7 AAA Local User Rights note