topic RE: How to deny factory default from ssh session ? in ExtremeSwitching (EXOS/Switch Engine)

How to deny factory default from ssh session ?

Jae-ok_Lee — Wed, 19 Jul 2017 09:48:00 GMT

Hi everybody.

I want to deny 'unconfig switch all command' from ssh session.
How to do ?

RE: How to deny factory default from ssh session ?

Ram3 — Wed, 19 Jul 2017 10:06:00 GMT

EXOS does not have a CLI command to restrict it. You can try writing a script in switch to restrict access for "unconfigure switch all" command.

RE: How to deny factory default from ssh session ?

Jae-ok_Lee — Wed, 19 Jul 2017 10:30:00 GMT

To. Ram

Thanks for your reply.

RE: How to deny factory default from ssh session ?

Drew_C — Wed, 19 Jul 2017 19:26:00 GMT

You can use TACACS+ or RADIUS with command authorization. The only other option is to grant user access instead of admin privileges to each account you want to restrict.

RE: How to deny factory default from ssh session ?

Jae-ok_Lee — Wed, 19 Jul 2017 19:26:00 GMT

Thanks, Drew
Unfortunately, this site don't use TACACS+ and RADIUS, one ID is used to access switch form console and ssh session.