Configuration Procedure; Configuring A Feature Group - HPE FlexFabric 5940 Series Configuration Manual

rule 2 deny read write oid 1.3.6.1.4.1
rule 3 permit read write oid 1.3.6.1.4.1

Configuration procedure

To configure rules for a user role:
Step
Enter system view.
1.
Enter user role view.
2.
Configure rules for
3.
the user role.

Configuring a feature group

Use feature groups to bulk assign command access permissions to sets of features. In addition to
the predefined feature groups, you can create a maximum of 64 custom feature groups and assign a
feature to multiple feature groups.
To configure a feature group:
Step
Enter system view.
1.
Create a feature group
2.
and enter its view.
Command
system-view
role name role-name
•
Configure a command rule:
rule number { deny | permit }
command command-string
•
Configure a feature rule:
rule number { deny | permit }
{ execute | read | write } * feature
[ feature-name ]
•
Configure a feature group rule:
rule number { deny | permit }
{ execute | read | write } *
feature-group feature-group-name
•
Configure an XML element rule:
rule number { deny | permit }
{ execute | read | write } *
xml-element [ xml-string ]
•
Configure an OID rule:
rule number { deny | permit }
{ execute | read | write } * oid
oid-string
Command
system-view
role feature-group name
feature-group-name
22
Remarks
N/A
N/A
By default, a user-defined user role
does not have any rule or access to
any command, XML element, or MIB
node.
Repeat this step to add a maximum
of 256 rules to the user role.
IMPORTANT:
When you configure feature rules,
you can specify only features
available in the system. Enter
feature names the same as the
feature names are displayed,
including the case.
Remarks
N/A
By default, the system has the following
predefined feature groups:
•
L2—Includes all Layer 2 commands.
•
L3—Includes all Layer 3 commands.
These two groups are not user
configurable.