System Management Configuration Statements

To configure system management, you can include the following statements in the configuration:

system { 

    accounting {

        events [ login change-log interactive-commands ];

        destination {

            tacplus {

                server { 

                    server-address {

                        port port-number;

                        secret password ;

                        single-connection;

                        timeout seconds;

                    }

                }

        }

    }

    archival {

        configuration {

            archive-sites {

                ftp://<username>:<password>@<host>:<port>/<url-path>;

            }

            transfer-interval interval;

            transfer-on-commit;

        }

    }

    authentication-order [ authentication-methods ]; 

    backup-router address <destination destination-address>;

    building name;

    (compress-configuration-files | no-compression-configuration-files);

    default-address-selection;

    dump-device (compact-flash | remove-compact | usb);

    diag-port-authentication (encrypted-password "password" | 

                plain-text-password);

    diag-port-authentication {

        disable;

        maximum-hop-count;

        minimum-wait-time seconds;        

        server [ address ]; 

        interface interface-group {

            no-listen;

            maximum-hop-count;

            minimum-wait-time seconds;        

            server [ address ]; 

        }

    }

    domain-name domain-name; 

    domain-search [domain-list];

    host-name host-name; 

    internet-options address <destination destination-address>;

    internet-options {

        path-mtu-discovery;

        source-port upper-limit <upper-limit>;

        source-quench;

    }

    location {

        altitude feet;

        building name;

        country-code code;

        floor number;

        hcoord horizontal-coordinate;

        lata service-area;

        latitude degrees;

        longitude degrees;

        npa-nxx number;

        postal-code postal-code;

        rack number;

        vcoord vertical-coordinate;

    }

    login {

        message text;

        class class-name {

            allow-commands "regular-expression"; 

            allow-configuration "regular-expression";

            deny-commands "regular-expression";

            deny-configuration "regular-expression";

            idle-timeout minutes;

            no-tip;

            permissions [ permissions ]; 

        }

        user username {

            full-name complete-name;

            uid uid-value; 

            class class-name; 

            authentication {

                (encrypted-password "password" | plain-text-password); 

                ssh-rsa "public-key";

                ssh-dsa "public-key";

            }

        }

    }

    max-configurations-on-flash number;

    mirror-flash-on-disk;

    name-server {

        address; 

    }

    no-redirects; 

    ntp {

        authentication-key key-number type type value password;

        boot-server address;

        broadcast <address> <key key-number> <version value> <ttl value>;

        broadcast-client;

        multicast-client <address>;

        peer address <key key-number> <version value> <prefer>;

        source-address source-address;

        server address <key key-number> <version value> <prefer>;

        trusted-key [ key-numbers ];

    }

    ports {

        auxiliary {

            type terminal-type;

        }

    pic-console-authentication {

        encrypted-password encrypted-password;

        plain-text-password;

        console {

            insecure;

            log-out-on-disconnect;

            type terminal-type;

        }

    }

    processes {

        disk-monitoring (enable | disable);

        inet-process (enable | disable) failover (alternate-media | 

            other-routing-engine);

        interface-control (enable | disable) failover (alternate-media | 

            other-routing-engine);

        mib-process (enable | disable) failover (alternate-media | 

            other-routing-engine);

        ntp (enable | disable) failover (alternate-media | other-routing-engine);

        routing (enable | disable) failover (alternate-media | other-routing-engine);

        snmp (enable | disable) failover (alternate-media | other-routing-engine);

        watchdog (enable | disable) failover (alternate-media | other-routing-engine)

            timeout seconds;

    }

    radius-server server-address {

        port number;

        retry number; 

        secret password;

        source-address source-address; 

        timeout seconds; 

    }

    root-authentication {

        (encrypted-password "password" | plain-text-password);

        ssh-rsa "public-key"; 

        ssh-dsa "public-key";

    }

    (saved-core-context | no-saved-core-context); 

    saved-core-files saved-core-files; 

    services {

        finger {

            <connection-limit limit>;

            <rate-limit limit>;

        }

        ftp {

            <connection-limit limit>;

            <rate-limit limit>;

        }

        service-deployment {

            servers server-address {

                port port-number;

                    }

            source-address source-address;

        }

        ssh {

            root-login (allow | deny | deny-password);

            protocol-version [v1 v2];

            <connection-limit limit>;

            <rate-limit limit>;

        }

        telnet {

            <connection-limit limit>;

            <rate-limit limit>;

        }

        xnm-clear-text {

            <connection-limit limit>;

            <rate-limit limit>;

        }

        xnm-ssl {

            <connection-limit limit>;

            local-certificate name;

            <rate-limit limit>;

        }

    }

    static-host-mapping {

        host-name {

            alias [ alias ];

            inet [ address ]; 

            sysid system-identifier; 

        }

    }

    syslog {

        archive {

            files number;

            size size; 

            (world-readable | no-world-readable); 

        }

        console {

            facility severity;

        }

        file filename {

            facility severity;

            explicit-priority;

            archive {

                files number;

                size size; 

                (world-readable | no-world-readable); 

            }

        }

        host (hostname | other-routing-engine | scc-master) {

            facility severity;

            explicit-priority;

            facility-override facility;

            log-prefix string;

        }

        source-address source-address;

        time-format (year | millisecond | year millisecond);

        user (username | *) {

            facility severity;

        }

    }

    tacplus-options service-name service-name;

    tacplus-server server-address {

        secret password;

        single-connection;

        source-address source-address; 

        timeout seconds; 

    }

    time-zone time-zone;

}