Vsa Configuration Examples; Table 48: Juniper Networks-Specific Virtual Router Access Vsa - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SYSTEM BASICS CONFIGURATION GUIDE 2010-10-04 Configuration Manual

Example 1
Copyright © 2010, Juniper Networks, Inc.
NOTE: This classification is independent of the command access levels
configurable through the Initial-CLI-Access-Level VSA.
The VSA Allow-All-VR-Access controls access; the VSA Virtual-Router controls the VR
to which the user logs in, and the VSA Alt-CLI-Virtual-Router-Name specifies which VRs
other than the VR specified by the VSA virtual-router are accessible to restricted users.
See Table 48 on page 433.
Table 48: Juniper Networks–Specific Virtual Router Access VSA
Descriptions
VSA Description
Allow-All-VR-Access Specifies user
access to all
virtual routers.
Virtual-Router Specifies the
VR to which
the user logs in
or the only VR
to which a user
has access.
The default
setting is the
default VR.
Alt-CLI-Virtual-Router- Specifies a VR,
Name other than the
VR specified
by the
Virtual-Router
VSA, to which
the user has
access. You
can define this
VSA multiple
times to define
a set of VRs to
which a user
has access.

VSA Configuration Examples

Consider a router on which five VRs have been configured. The VRs are called Boston,
Chicago, Detroit, Los Angeles, and San Francisco. The following examples illustrate how
to use the VSAs to control a user's access to these VRs.
In this example, you want the user to have access to all VRs and to log in to the default
VR. Accept the default setting or set the following VSA:
Chapter 7: Passwords and Security
Type Length Subtype
26 len 19
26 len 1
26 len 21
Subtype
Length Value
sublen Integer:
0 – disable,
1 – enable
sublen String:
virtual-router
-name
sublen String:
virtual-router
-name
433