Re: (PM) Access Levels

Thomas Kinnen (tkinnen@livingston.com)
Wed, 17 Feb 1999 22:10:02 -0800

Chris Edwards wrote:
>
> I there any way I can set up seperate access levels? ie.. a level for my
> support team to view who's on line, etc with out having configuration
> access?

In RADIUS:

Service-Type = Administrative-User
vs.
Service-Type = NAS-Prompt-User

http://www.livingston.com/tech/docs/radntad/userinfo.html#1011746

Administrative-User :
The PortMaster grants the user a full administrative login--as if the user had
logged in using !root. The user has full configuration ability and access to
all PortMaster commands. This Service-Type is available only with ComOS 3.5
or later versions.

NAS-Prompt-User :
The PortMaster grants the user a limited administrative login. The user can
use the following commands: ifconfig, ping, ptrace, reboot, reset, set
console, set debug, show, traceroute, and any nonconfiguration commands. The
following commands are not permitted: add, delete, erase, save, tftp, and any
set commands other than set console or set debug. This Service-Type is
available only with ComOS 3.5 or later versions.

----
Thomas C Kinnen - <tkinnen@livingston.com> <tkinnen@ra.lucent.com>
"All of the opinions stated above are my own and not my employer's,
unless they were given to me by my employer"
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>