Cisco Cisco Packet Data Gateway (PDG) Guia De Resolução De Problemas
Command Line Interface Overview
CLI Administrative Users ▀
Cisco ASR 5000 Series Enhanced Feature Configuration Guide ▄
OL-22982-01
Table 3. User Privilege to User Type Mapping
User Type as Defined by T1.276-2003
Local-User Level User
Context-Level User
System Security Administrator
Security Administrator
Administrator
Application Security Administrator
Security Administrator
Administrator
System Administrator
Administrator
Config-Administrator
Application Administrator
Administrator
Config-Administrator
Application User/Operator
Operator
Operator
not applicable
Inspector
Inspector
Configure context-level administrative users in the Context Configuration Mode with the
,
,
, and
commands.
Configure local-user administrative users at the Global Configuration Mode with the
command.
You can further refine administrative levels to include access to certain features with the following feature-use
administrative user options:
administrative user options:
Lawful Intercept (LI) Administrative User: To configure and manage LI-related issues, configure at least one
administrative user account with LI functionality privileges.
Important:
This privilege is available only for context-level administrative users. In addition, to ensure security
in accordance with the standards, LI administrative users must access the system through the Secure Shell Protocol
(SSH).
(SSH).
Enhanced Charging Service (ECS) Administrative User: To log in and execute ECS-related commands,
configure at least one administrative user account with ECS functionality privileges.
All system users can be configured within any context. However, it is recommended that you configure users in the
system‘s management context called local. Refer to sections later in this chapter for additional information about
contexts.
system‘s management context called local. Refer to sections later in this chapter for additional information about
contexts.
Allowed Commands per User Type
With the exception of security administrators, all other management users are limited to a subset of the entire command
list as described in the Command Line Interface Reference. This section defines the commands allowed for each
management user type. As stated previously, inspectors and operators are limited to only a subset of the Exec Mode
commands.
list as described in the Command Line Interface Reference. This section defines the commands allowed for each
management user type. As stated previously, inspectors and operators are limited to only a subset of the Exec Mode
commands.