H3C MSR Router V7 AAA Local User Rights note

In the configuration of the V5 H3C MSR router, including the V7 H3C switch, the AAA local user right can be modified by Authentication-mode level 1/2/3 To modify the user's configuration permissions. In the new MSR Router V7 version, the level option is not available and only the local user rights are configured through user-role

650) this.width=650; "src=" Http://s5.51cto.com/wyfs02/M00/78/43/wKioL1Z5DK6yW17_AAAqEyG8A8s229.png "title=" ori@_ 2js[je9y[@28ibb{jj.png "alt=" Wkiol1z5dk6yw17_aaaqeyg8a8s229.png "/>

Version number is v7.1.059

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M01/78/44/wKioL1Z5DSngoo-dAABHSiHrUw8874.png "style=" float: none; "title="}) $6y5) I3@UMRT8OGVU7%ED.png "alt=" Wkiol1z5dsngoo-daabhsihruw8874.png "/>

In the User-role option, you can see that there are many roles to configure

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M02/78/45/wKiom1Z5DSCjSCdVAAAY7ZybY-E580.png "style=" float: none; "title=" Qq20151222164145.png "alt=" Wkiom1z5dscjscdvaaay7zyby-e580.png "/>

Display View role User rights

level-0

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M02/78/45/wKiom1Z5EILA1MrRAAAj31vGEco501.png "style=" float: none; "title=" Level-0.png "alt=" Wkiom1z5eila1mrraaaj31vgeco501.png "/>

Level-1

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M01/78/44/wKioL1Z5EJTCHGHBAAAmw6K5fxY768.png "style=" float: none; "title=" Level-1.png "alt=" Wkiol1z5ejtchghbaaamw6k5fxy768.png "/>

Level-2/3/4/5/6/7/8

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M01/78/45/wKiom1Z5EIOSBZtAAAC4dVgcJ7w365.png "style=" float: none; "title=" Level-2-8.png "alt=" Wkiom1z5eiosbztaaac4dvgcj7w365.png "/>

Level-9

650) this.width=650; "src=" Http://s4.51cto.com/wyfs02/M02/78/44/wKioL1Z5EJXQXmkmAAAoaubtsQk405.png "style=" float: none; "title=" Level-9.png "alt=" Wkiol1z5ejxqxmkmaaaoaubtsqk405.png "/>

Level-10/11/12/13/14

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/78/44/wKioL1Z5EJmAOCrXAAC5nPGStFw995.png "style=" float: none; "title=" Level-10-14.png "alt=" Wkiol1z5ejmaocrxaac5npgstfw995.png "/>

Level-15/network-admin

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M02/78/45/wKiom1Z5EIzgcT1ZAAC3qf1xyKE096.png "style=" float: none; "title=" Level-15.png "alt=" Wkiom1z5eizgct1zaac3qf1xyke096.png "/>

Network-operator

650) this.width=650; "src=" Http://s1.51cto.com/wyfs02/M00/78/45/wKiom1Z5EIyifXHCAABO7l3ZuTs158.png "style=" float: none; "title=" Level-op.png "alt=" Wkiom1z5eiyifxhcaabo7l3zuts158.png "/>

It can be summed up from above

√level-0

Executable Commands Ping, tracert, SSH2, Telnet, and super

√level-1

Permissions with the level-0 user role and executable display commands for all functions and resources of the system (except display History-command all)

√level-2-8

√level-10-14

The lack of savings is no authority

√level-9

The majority of functions and all resources in the system can be manipulated, but not the display History-command All command, RBAC commands (except debug commands), file management, device management, and local user features. For local Users, you can modify your password if the user logs on to the system and is granted the role

√level-15

Same as Network-admin permissions

For level2-8 10-14 The default does not turn on the authorization feature

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/78/44/wKioL1Z5EdGAxgwgAAADqH1wZJk832.png "title=" Role.png "alt=" Wkiol1z5edgaxgwgaaadqh1wzjk832.png "/>

Need to open authorization command

This article is from the "rog91222" blog, make sure to keep this source http://rog91222.blog.51cto.com/9887148/1727274

H3C MSR Router V7 AAA Local User Rights note