Adding a command set, Modifying a command set – H3C Technologies H3C Intelligent Management Center User Manual
Page 58
49
4.
To return to the command set list, click Back.
Adding a command set
To add a command set:
1.
Click the User tab.
2.
On the navigation tree, select Device User Policy > Authorization Command > Command Sets.
The Command Set list displays all command sets.
3.
In the Command Set list area, click Add.
4.
Configure the basic information:
{
Command Set Name—Enter the name of the command set, which must be unique in TAM.
{
Default Authorization Type—Options are:
−
Permit—A device user can execute commands not in the command set.
−
Deny—A user cannot execute commands not in the command set.
{
Description—Enter a description for the command set for easy maintenance.
5.
Configure the command set information.
Each line in a command set list defines a rule for executing commands.
a.
In the Command Set Information area, click Add.
b.
From the Authorization list, select Permit or Deny.
c.
Enter the complete syntax for a command. When the command is typed on a device, TAM
performs a fuzzy match for parameters of the command. For example, disp matches display in
the command.
Use a regular expression to filter commands. For more information, see "
d.
Click OK.
e.
Repeat the previous steps to add more rules.
f.
Click the Move Up icon or the Move Down icon to increase or decrease the priority of the
rule. If the command you execute matches multiple rules, the rule with the highest priority
applies.
g.
To modify a rule, click the Modify icon
for the rule.
h.
To delete a rule, click the Delete icon for the rule.
6.
Click OK.
Modifying a command set
A command set immediately takes effect on online users (users logging in to the device) controlled by the
command set, which means the modified command set is used to determine the commands that can be
executed by the online users.
To modify a command set:
1.
Click the User tab.
2.
On the navigation tree, select Device User Policy > Authorization Command > Command Sets.
The Command Set list displays all command sets.