Site icon KerKer 的模組世界

[Juniper] Junos使用者帳號設定

&NewLine;<p class&equals;"wp-block-paragraph">邊做邊學,順便留個筆記,若有錯誤請不吝指教。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">本篇主要說明 Junos 使用者帳號的設定及相關參數說明<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">Junos基本操作及root密碼設定可參考我之前的文章:<a href&equals;"https&colon;&sol;&sol;kerker&period;website&sol;juniper-junos&percnt;E5&percnt;9F&percnt;BA&percnt;E6&percnt;9C&percnt;AC&percnt;E6&percnt;93&percnt;8D&percnt;E4&percnt;BD&percnt;9C&percnt;E3&percnt;80&percnt;81root&percnt;E5&percnt;AF&percnt;86&percnt;E7&percnt;A2&percnt;BC&percnt;E8&percnt;A8&percnt;AD&percnt;E5&percnt;AE&percnt;9A&sol;">Juniper Junos基本操作、root密碼設定<&sol;a><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">&NewLine;&NewLine;所有Juniper相關文章列表:<a href&equals;"https&colon;&sol;&sol;kerker&period;website&sol;juniper-junos-&percnt;E7&percnt;B3&percnt;BB&percnt;E5&percnt;88&percnt;97-&percnt;E6&percnt;96&percnt;87&percnt;E7&percnt;AB&percnt;A0&percnt;E5&percnt;88&percnt;97&percnt;E8&percnt;A1&percnt;A8&sol;">Juniper JunOS 系列文章列表<&sol;a><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<&excl;--more-->&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">使用者帳號為使用者提供了訪問設備的一種方式,對於每個使用者帳號,您可以定義以下內容:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">Username &&num;8211&semi; 識別使用者的名稱。它必須在設備中是唯一的。不要在用戶名中包含空格,冒號或逗號。用戶名最長可達64個字元。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">Class &&num;8211&semi; 使用者權限類別,系統預設了四種權限類別<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph"> operator &&num;8211&semi; 具備clear&comma; trace等指令的權限,及檢視設定檔的權限。<br> read-only &&num;8211&semi; 僅具備檢視設定檔的權限<br> superuser &&num;8211&semi; 具備所有權限&lpar;包含修改root密碼&rpar;<br> unauthorized &&num;8211&semi; 無權限<br> User’s full name&lpar;可選&rpar; &&num;8211&semi; 如果全名包含空格,請將其用引號括<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">Class的詳細設定方式可以參考:<a href&equals;"https&colon;&sol;&sol;kerker&period;website&sol;juniper-junos&percnt;E4&percnt;BD&percnt;BF&percnt;E7&percnt;94&percnt;A8&percnt;E8&percnt;80&percnt;85&percnt;E5&percnt;B8&percnt;B3&percnt;E8&percnt;99&percnt;9F&percnt;E6&percnt;AC&percnt;8A&percnt;E9&percnt;99&percnt;90&percnt;E8&percnt;A8&percnt;AD&percnt;E7&percnt;BD&percnt;AEclass&sol;">Juniper Junos使用者帳號權限設置&lpar;Class&rpar;<&sol;a><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">User’s full name&lpar;可選&rpar; &&num;8211&semi; 如果全名包含空格,請將其用引號括起來。不要包括冒號或逗號。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">UID&lpar;可選&rpar; &&num;8211&semi; UID必須在100到64&comma;000的範圍內,並且在設備中必須是唯一的。如果您沒有為用戶名分配UID,則系統會在您完成設定時分配一個UID。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用已下指令創建使用者帳號,並給予相應權限分類:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; class &lbrack;class name&rsqb;&NewLine;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用以下指令為使用者帳號設定plain-text-password:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; authentication plain-text-password <br>New Password&colon; &lbrack;type password here&rsqb; <br>Retype new password&colon; &lbrack;retype password here&rsqb; <&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用以下指令為使用者帳號設定encrypted-password:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; authentication encrypted-password &lbrack;password&rsqb;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用下列兩條指令可以自定義full name及UID:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; full-name &lbrack;User’s full name&rsqb;<br>root&num; set system login user &lbrack;username&rsqb; uid &lbrack;UID&rsqb;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">完成設定後記得要下&&num;8221&semi;commit&&num;8221&semi;來使設定生效,更多關於commit指令的內容可以參考:<a href&equals;"https&colon;&sol;&sol;kerker&period;website&sol;juniper-junos&percnt;E6&percnt;8F&percnt;90&percnt;E4&percnt;BA&percnt;A4&percnt;E8&percnt;A8&percnt;AD&percnt;E5&percnt;AE&percnt;9Acommit&sol;">Juniper Junos提交設定&lpar;commit&rpar;<&sol;a><&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; commit<br>configuration check succeeds<br>commit complete<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">完成設定後可以在命令列模式使用&&num;8221&semi;show configuration system login&&num;8221&semi;指令查看設定檔,以下設定是一個read-only權限帳號的範例:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&gt&semi; show configuration system login <br>user RD &lbrace; <br> uid 2003&semi; <br> class read-only authentication &lbrace; <br> encrypted-password "&dollar;5&dollar;RlgvCGID&dollar;XF3MPshS9MxvYQKSagIWAODgwPNEPg5imH&period;&sol;3p&sol;&period;0nB"&semi; &num;&num; SECRET-DATA <br> &rcub;<br>&rcub;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">起來。不要包括冒號或逗號。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">UID&lpar;可選&rpar; &&num;8211&semi; UID必須在100到64&comma;000的範圍內,並且在設備中必須是唯一的。如果您沒有為用戶名分配UID,則系統會在您完成設定時分配一個UID。<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用已下指令創建使用者帳號,並給予相應權限分類:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; class &lbrack;class name&rsqb;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用以下指令為使用者帳號設定plain-text-password:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; authentication plain-text-password <br>New Password&colon; &lbrack;type password here&rsqb; <br>Retype new password&colon; &lbrack;retype password here&rsqb; <&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用以下指令為使用者帳號設定encrypted-password:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; authentication encrypted-password &lbrack;password&rsqb;&NewLine;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">plain-text-password是直接輸入密碼後系統幫你加密。<br>encrypted-password的密碼要自己加密過後在輸入進去。 <&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">在設定模式下使用下列兩條指令可以自定義full name及UID:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; set system login user &lbrack;username&rsqb; full-name &lbrack;User’s full name&rsqb;&NewLine;root&num; set system login user &lbrack;username&rsqb; uid &lbrack;UID&rsqb;&NewLine;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">&NewLine;完成設定後記得要下&&num;8221&semi;commit&&num;8221&semi;來使設定生效&NewLine;<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&num; commit&NewLine;configuration check succeeds&NewLine;commit complete&NewLine;<&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph">完成設定後可以在命令列模式使用&&num;8221&semi;show configuration system login&&num;8221&semi;指令查看設定檔,以下設定是一個read-only權限帳號的範例:<&sol;p>&NewLine;&NewLine;&NewLine;&NewLine;<pre class&equals;"wp-block-preformatted">root&gt&semi; show configuration system login <br>user RD &lbrace; <br> uid 2003&semi; <br> class read-only&semi; authentication &lbrace; <br> encrypted-password "&dollar;5&dollar;RlgvCGID&dollar;XF3MPshS9MxvYQKSagIWAODgwPNEPg5imH&period;&sol;3p&sol;&period;0nB"&semi; &num;&num; SECRET-DATA <br> &rcub;<br>&rcub; <&sol;pre>&NewLine;&NewLine;&NewLine;&NewLine;<p class&equals;"wp-block-paragraph"> <br><br><br><&sol;p>&NewLine;

Exit mobile version