R0106-HP MSR Router Series Fundamentals Command Reference(V7)

Any rule modification, addition, or removal for a user role takes effect only on the users who log in with

the user role after the change.

Access to the file system commands is controlled by both the file system command rules and the file

system feature rule.

A command with output redirection to the file system is permitted only when the command type write is

assigned to the file system feature.

When you specify a command string, follow the guidelines in Table 3.

Table 3 Command stri

ng configuration rules

Rule Guidelines

Semicolon (;) is the delimiter.

Use a semicolon to separate the command of each view that you must

enter before you access a command or a set of commands. However, do

not use a semicolon to separate commands available in user view or any

view, for example, display and dir.

Each semicolon-separated segment must have a minimum of one printable

character.

To specify the commands in a view but not the commands in the view's

subviews, use a semicolon as the last printable character in the last

segment. To specify the commands in a view and the view's subviews, the

last printable character in the last segment must not be a semicolon.

For example, you must enter system view before you enter interface view.

To specify all commands starting with ip in any interface view, you must

use the "system ; interface * ; ip * ;" command string.

For another example, the "system ; radius scheme * ;" command string

represents all the commands that start with radius scheme in system view.

The "system ; radius scheme *" command string represents all the

commands that start with radius scheme in system view and all the

commands in RADIUS scheme view.

Asterisk (*) is the wildcard.

An asterisk represents zero or multiple characters.

In a non-last segment, you can use an asterisk only at the end of the

segment.

In the last segment, you can use an asterisk in any position of the segment.

If the asterisk appears at the beginning, you cannot specify any printable

characters behind the asterisk.

For example, the "system ; *" command string represents all commands

available in system view and all subviews of the system view. The

"debugging * event" command string represents all event debugging

commands available in user view.

Keyword abbreviation is allowed.

You can specify a keyword by entering the first few characters of the

keyword. Any command that starts with this character string matches the

rule.

For example, "rule 1 deny command dis mpls lsp protocol static asbr"

denies access to the commands display mpls lsp protocol static asbr and

display mpls lsp protocol static-cr asbr.