Cisco Cisco Packet Data Interworking Function (PDIF)
System Settings
Configuring System Administrative Users ▀
ASR 5500 System Administration Guide, StarOS Release 18 ▄
59
Requiring Confirmation for autoconfirm and configure Commands
You can require confirmation prompting for the autoconfirm (Exec mode and Global Configuration mode) and
configure (Exec mode) commands via the Global Configuration mode commandguard command.
configure (Exec mode) commands via the Global Configuration mode commandguard command.
Important:
If autoconfirm is enabled, commandguard will not take effect until autoconfirm is disabled in both
Exec and Global Configuration modes.
The following command sequence enables the commandguard feature:
configure
commandguard
end
With commandguard enabled the confirmation prompt appears as shown in the example below:
[local]host_name# configure
Are you sure? [Yes|No]: yes
[local]host_name(config)#
Are you sure? [Yes|No]: yes
[local]host_name(config)#
To disable commandguard once it has been enabled, use the no commandguard command.
The status of commandguard is output in show configuration commands.
Configuring System Administrative Users
Getting Started describes how to configure a context-level security administrator for the system.
This section provides instructions for configuring additional administrative users having the following privileges:
Security Administrators: have read-write privileges and can execute all CLI commands, including those
available to Administrators, Operators, and Inspectors
Administrators: have read-write privileges and can execute any command in the CLI except for a few security-
related commands that can only be configured by Security Administrators. Administrators can configure or
modify system settings and execute all system commands, including those available to the Operators and
Inspectors.
modify system settings and execute all system commands, including those available to the Operators and
Inspectors.
Operators: have read-only privileges to a larger subset of the Exec Mode commands. They can execute all
commands that are part of the inspector mode, plus some system monitoring, statistic, and fault management
functions. Operators do not have the ability to enter the Config Mode.
functions. Operators do not have the ability to enter the Config Mode.
Inspectors: are limited to a few read-only Exec Mode commands. The bulk of these are show commands for
viewing a variety of statistics and conditions. An Inspector cannot execute show configuration commands and
does not have the privilege to enter the Config Mode.
does not have the privilege to enter the Config Mode.
Configuration instructions are categorized according to the type of administrative user: context-level or local-user.
Important:
For information on the differences between these user privileges and types, refer to Getting Started.