Changing Resource Access Policies; Changing The Interface Policy Of A User Role - HP 6125XLG Configuration Manual

Step
2. Create a feature group
and enter feature group
view.
3. Add a feature to the
feature group.

Changing resource access policies

Every user role has one interface policy, VLAN policy, and VPN instance policy. By default, these policies
permit user roles to access any interface, VLAN, and VPN. You can change the policies of user-defined
user roles and the predefined level-n user roles to limit their access to interfaces, VLANs, and VPNs. A
changed policy takes effect only on users that are logged in with the user role after the change.

Changing the interface policy of a user role

Step
1. Enter system view.
2. Enter user role view.
3. Enter user role interface
policy view.
4. (Optional.) Specify a list of
interfaces accessible to the
user role.
Command
role feature-group name
feature-group-name
feature feature-name
Command
system-view
role name role-name
interface policy deny
permit interface interface-list
47
Remarks
By default, the system has the
following predefined feature
groups:
•
L2—Includes all Layer 2
commands.
•
L3—Includes all Layer 3
commands.
These two groups are not user
configurable.
By default, a feature group has no
features.
IMPORTANT:
You can specify only features
available in the system and must
enter feature names exactly the
same as they are displayed,
including the case.
Remarks
N/A
N/A
By default, the interface policies of
user roles permit access to all
interfaces.
This command disables the access of
the user role to any interface.
By default, no accessible interfaces
are configured.
To add more accessible interfaces,
repeat this step.