User Guide

OmniAccess SafeGuard OS Administration Guide
292
Chapter 6: Configuring Authentication and Role Derivation
Building off of the previous example of the two types of user groups, we would want to
assign a higher precedence value to the “highPower” user group over the normal “user”
group.
(SafeGuardOS) (config) # aaa rule-map apply allUsers precedence 2000
(SafeGuardOS) (config) # aaa rule-map apply specialUser precedence 10
(SafeGuardOS) (config) #
Removing the Rule Map
Before removing the rule map, remove the apply for the rule map using the following
command in Global Configuration mode:
no aaa rule-map apply [rulemap_name | all]
The command has no options or parameters.
Next, remove the configured rule map using the no version of the aaa rule-map
command.
no aaa rule-map [rulemap_name | all]
In this example, we are removing the rule map called “specialUsers”.
(SafeGuardOS) (config) # no aaa rule-map apply specialUsers
(SafeGuardOS) (config) # no aaa rule-map specialUsers
(SafeGuardOS) (config) #
Displaying Rule Map Information
There are Privileged Exec show commands to display rule map and rule-related
configurations. See the following sections:
■ Showing Rule Map Usage
■ Showing a Rule Map Configuration
■ Adding VSAs to the Dictionary File
Syntax Description rulemap_name Rule map name in character string
all This will unapply all the currently applied rule
maps.
Syntax Description rulemap_name Rule map name in character string
all This will unapply all the currently applied rule
maps.