Admin Guide

access-policy <1-65535> access-strict
4. Configure access for an access policy:
access-policy <1-65535> accesslevel <ro|rwa|rw>
5. Configure the access policy mode, network, and precedence:
access-policy <1-65535> [mode <allow|deny>] [precedence <1-128>]
[network <A.B.C.D> <A.B.C.D>]
If you configure the access policy mode to deny, the system checks the mode and service,
and if they match the system denies the connection. With the access policy mode configured
to deny, the system does not check accesslevel and access-strict information. If you
configure the access policy mode to allow, the system continues to check the accesslevel
and access-strict information.
6. Configure optional access protocols for an access policy:
access-policy <1-65535> [ftp] [http] [ssh] [telnet] [tftp]
7. Configure optional trusted username access for an access policy:
access-policy <1-65535> host WORD<0–46> [username WORD<0–30>]
8. Configure optional SNMP parameters for an access policy:
access-policy <1-65535> [snmp-group WORD<1–32> <snmpv1|snmpv2c|usm>]
OR
access-policy <1-65535> [snmpv3]
9. Enable the access policy:
access-policy <1-65535> enable
10. Enable access policies globally:
access-policy
Example
Assuming no access policies exist, start with policy 3 and name the policy policy3:
Switch:1(config)# access-policy 3 name policy3
Add read-write-all access level to policy 3:
Switch:1(config)# access-policy 3 accesslevel rwa
Add the usm group group_example to policy 3:
Switch:1# access-policy 3 snmp-group group_example usm
Enable access strict:
Switch:1config)# access-policy 3 access-strict
Enable policy 3:
Switch:1(config)# access-policy 3 enable
System access configuration using ACLI
January 2017 Administering Avaya VSP 7200 Series and 8000 Series 191
Comments on this document? [e-mail]