Alcatel-Lucent 7210 SAS E OS System Management Manual page 29

One or more
VSA.
•
•
•
•
If no VSAs are configured for a user, then the following applies:
If all conditions listed above are not met, then access to the
event/trap is written to the security log.
The complete list of TiMetra VSAs is available on a file included on the compact flash shipped
with the image.
7210 SAS-E OS System Management Guide
All commands at and below the hierarchy level of the matched command are subject to
the
timetra-action
Multiple match-strings can be entered in a single
be semicolon (;) separated (maximum string length is 254 characters).
VSAs can be entered followed by a single
timetra-cmd
timetra-action <deny|permit>
to all match strings specified since the last timetra-action VSA.
timetra-home-directory <home-directory string>
directory that applies for the FTP and CLI user. If this VSA is not configured, the home
directory is Compact Flash slot 1 (cf1:).
timetra-restrict-to-home-directory <true|false>
access is limited to their home directory (and directories and files subordinate to their
home directory). If this VSA is not configured the user is allowed to access the entire file
system.
timetra-login-exec <login-exec-string>
executed when the user login is successful. If this VSA is not configured no login exec file
is applied.
1. The password authentication-order command on the router must include
2. The user name must be configured on the router.
3. The user must be successfully be authenticated by the RADIUS server
4. A valid profile must exist on the router for this user.
VSA.
— Causes the permit or deny action to be applied
VSA. Match strings must
timetra-cmd
timetra-action
— Specifies the home
— Specifies if user
— Specifies the login exec file that is
router
is denied and a failed login
Security
.
local
Page 29