Method for command line interface authority classification and system thereof

Abstract

The present invention discloses a method for the command line interface authorization grading. The procedure comprises that the authorization of the user operation command line interface equipment is divided into various grades; the command tree view opposite to the authority is provided to the user according to the various authorization grades. Correspondingly, the present invention also provides a command line interface authorization grading system. The present invention solves the problem that the authorization grade in the existing command line interface authorization management is not delicate and the configuration is not flexible, what you See is what you get, and the user operation is very convenient. At the same time, the present invention satisfies the security application requirement based on the command line configuration, prevents the unauthorized user to consult or change the equipment configuration information beyond the authorization scope, and guarantees the security and the normal running of the equipment.

Description

technical field [0001] The invention relates to the field of command line interface management, in particular to a method and system for grading command line interface permissions. Background technique [0002] With the wide application of IP network data products, such as routers, switches, etc., the security requirements for network management are gradually increasing, especially for network equipment that adopts CLI (Command-Line Interface, command-line interface) management mode, its security issues increasingly prominent. If junior maintenance personnel destroy the configuration information of the device due to misoperation, or illegal intruders maliciously access and observe the configuration information of the device through the physical interface of the device, or even reconfigure the device and gain control over it, it will cause serious damage to the safe operation of the network device. harm. Therefore, in the data products of the current IP network, it is inevi...

AI Technical Summary

Problems solved by technology

However, because the number of roles is generally limited, and the command operations allowed by each role are relatively fixed, and considering that network data products are completely based on CLI command line operations and configuration methods, generally speaking, the command set is huge and the number of commands is large, so the traditional The role-based permission control method is still not flexible enough and needs further improvement

[0005] In summary, the existing technology of command line interface permission classification obviously has inconvenience and defects in actual use, so it is necessary to improve it

Images