Configuring An Sftp Root Directory; Associating An Sftp Root Directory With A Local User; Associating An Sftp Root Directory With An Administrator; Associating An Sftp Root Directory With A Config Administrator - Cisco ASR 5000 Administration Manual

Configuring TACACS+ for System Administrative Users

Configuring an SFTP root Directory

The subsystem sftp command allows the assignment of an SFTP root directory and associated access privilege
level.
configure
context local
server sshd
Notes:
• sftp_name is an alphanumeric string that uniquely identifies this subsystem.
• pathname specifies the root directory to which SFTP files can be transferred. Options include:

Associating an SFTP root Directory with a Local User

The local-user username command allows an administrator to associate an SFTP root directory with a
specified username.
configure
local-user username user_name authorization-level level ftp sftp-server sftp_name password
password
exit

Associating an SFTP root Directory with an Administrator

The administrator command allows an administrator to associate an SFTP root directory for a specified
administrator.
configure
context local

Associating an SFTP root Directory with a Config Administrator

The config-administrator command allows an administrator to associate an SFTP root directory with a specified
configuration administrator.
configure
context local
Configuring TACACS+ for System Administrative Users
This section describes TACACS+ (Terminal Access Controller Access Control System+) AAA (Authentication
Authorization and Accounting) service functionality and configuration on the ASR 5x00.
ASR 5000 System Administration Guide, StarOS Release 21.1
54
subsystem sftp [ name sftp_name root-dir pathname mode { read-only | readwrite } ]
◦ /hd-raid/records/cdr
◦ /flash
administrator user_name password password ftp sftp-server sftp_name
exit
config-administrator user_name password password ftp sftp-server sftp_name
exit
System Settings