blob: ff5426e36f1d3e2e7a760a51fe2848dab52d7c9e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
Huawei VRP Configuration
========================
Create a user with no privileges
```text
<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] local-user oxidized password irreversible-cipher verysecret
[*HUAWEI-aaa] local-user oxidized level 1
[*HUAWEI-aaa] local-user oxidized service-type terminal ssh
[*HUAWEI-aaa] commit
```
The commands Oxidized executes are:
1. screen-length 0 temporary
2. display version
3. display device
4. display current-configuration all
Command 2 and 3 can be executed without issues, but 1 and 4 are only available for higher level users. Instead of making Oxidized a read/write user on your device, lower the privilege-level for commands 1 and 4:
```text
<HUAWEI> system-view
[~HUAWEI] command-privilege level 1 view global display current-configuration all
[*HUAWEI] command-privilege level 1 view shell screen-length
[*HUAWEI] commit
```
Oxidized can now retrieve your configuration!
Caveat: Some versions of VRP default to appending a timestamp prior to the output of each `display` command, which will lead to superfluous updates. The configuration statement `timestamp disable` can be used to disable this functionality. (Issue #1218)
Back to [Model-Notes](README.md)
|
