How to deny factory default from ssh session ?

[Jae-ok_Lee]

Hi everybody.

I want to deny 'unconfig switch all command' from ssh session.
How to do ?

[Drew_C]

You can use TACACS+ or RADIUS with command authorization. The only other option is to grant user access instead of admin privileges to each account you want to restrict.

[Jae-ok_Lee]

Thanks, Drew
Unfortunately, this site don't use TACACS+ and RADIUS, one ID is used to access switch form console and ssh session.

[Jae-ok_Lee]

To. Ram

Thanks for your reply.

[Ram3]

EXOS does not have a CLI command to restrict it. You can try writing a script in switch to restrict access for "unconfigure switch all" command.