Rule - H3C IE4300 Command Reference Manual

rule

Use
rule
Use
undo rule
Syntax
rule number { deny | permit } { command command-string | { execute | read |
write } * { feature [ feature-name ] | feature-group feature-group-name |
oid oid-string | web-menu [ web-string ] | xml-element [ xml-string ] } }
undo rule { number | all }
Default
A user-defined user role does not have any rules and cannot access any resources.
Views
User role view
Predefined user roles
network-admin
Parameters
: Specifies a rule number in the range of 1 to 256.
number
: Denies access to the specified commands, Web menus, XML elements, or MIB nodes.
deny
: Permits access to the specified commands, Web menus, XML elements, or MIB nodes.
permit
command command-string
command or a group of commands. The
to 128 characters, including the following characters:
•
The wildcard asterisk (*).
•
The delimiters space and tab.
•
All printable characters.
: Specifies the execute commands, Web menus, XML elements, or MIB nodes to execute
execute
a specific function or program. The
: Specifies the read commands, Web menus, XML elements, or MIB nodes to display
read
configuration or maintenance information. The
examples of read commands.
: Specifies the write commands, Web menus, XML elements, or MIB nodes to configure the
write
system. The
feature [ feature-name ]
case-sensitive character string. If you do not specify a feature name, you specify all the features in
the system.
feature-group feature-group-name
The
feature-group-name
of 1 to 31 characters. If the feature group has not been created, the rule takes effect after the group
is created. To display the feature groups that have been created, use the
feature-group
oid oid-string
OID, a case-insensitive string of 1 to 255 characters. The OID is a dotted numeric string that uniquely
identifies the path from the root node to this node. For example, 1.3.6.1.4.1.25506.8.35.14.19.1.1.
to create or change a user role rule.
to delete user role rules.
: Specifies a command string. The command string can represent a
ssh server enable
: Specifies one or all features. The
argument represents the feature group name, a case-sensitive string
command.
: Specifies an OID of a MIB node. The
command-string
command is an example of execute commands.
ping
display
command is an example of write commands.
: Specifies a user-defined or predefined feature group.
22
argument is a case-sensitive string of 1
, , , and
dir more pwd
feature-name
argument represents the
oid-string
commands are
argument is a
display role