Cisco RPM-XF Specifications download pdf (Page 331)

5-121

Cisco ATM Services (AXSM) Configuration Guide and Command Reference for MGX Switches

Release 5.2, Part Number OL-6484-01 Rev. C0, September 2005

Chapter 5 AXSM Command Reference

cnfcli

Configure CLI—AXSM, AXSM-E, AXSM-32-T1E1-E, AXSM-XG

The cnfcli command is the CLI portion of a feature that lets you modify the user privilege (or access)

level of one or more commands. For a significant number of commands, you cannot modify the privilege,

and a list of these commands appears in the “Restrictions” section of this command description. This

command converts an ASCII text file with privilege changes to a binary file and applies it to the

commands whose privilege you have changed.

The ASCII file is created on a workstation by using “vi” or any other text editor. Subsequently, you FTP

the file to a TEMP directory on the node.

On the active AXSM, the cnfcli command can do one of two separate tasks according to the parameters:

• It can convert the ASCII file to a binary file then install the new command access levels.

• It can direct the switch to revert to the default privilege levels.

The following list describes details for this feature.

• The feature supports one ASCII file per switch. This file contains commands for the whole node and

all card types and any changed privileges. Use FTP to copy this file to the switch.

• When you modify a command privilege through this feature, commands with the same name receive

the same access level on all card types.

• The binary file is protected by an authentication signature generated from the binary file through a

64-bit key DES authentication encryption algorithm.

• The installed changes are persistent. The binary file is saved on the active AXSM hard disk and

replicated on the standby AXSM hard disk during installation.

• If you cause privileges to revert to the original, default privileges, this change is not persistent.

• If you add an AXSM after modifying command privileges, the installed card automatically takes the

privileges from the binary file on disk when the card comes up.

• For privilege changes to become effective when a card comes up, the binary modification file must

reside on disk. If the file does not exist on the disk or the computed authentication signature does

not match that of the file when you run cnfcli, the switch uses the default command access levels.

• The following commands are also relevant to this feature:

–

The saveallcnf command saves the binary file.

–

The restoreallcnf command restores the saved binary file.

–

The clrallcnf command deletes the binary file.

Restrictions

This section lists the restrictions on the use of the cnfcli command.

• You cannot change a command's privilege level to CISCO_GP.

• Only the switch software can generate the binary file. Any manual changes invalidate the file.

• If the binary file becomes corrupt, the command access levels revert back to the defaults during card

bring-up. To recover, repeat the installation process.

• The switch verifies command names in the ASCII file against the unchangeable commands listed in

this section, but an invalid command name you enter in the ASCII file could be parsed and added to

the binary file. The switch would ignore this invalid name.

1 ... 330 331 332 ... 688

Comments to this Manuals

No comments

Cisco RPM-XF Specifications Page 331

Comments to this Manuals

Related products and manuals for Networking Cisco RPM-XF