Commands Available to Users

If you do not configure RADIUS authentication for the console or virtual terminals, there are no restrictions on VR access for any user who successfully logs in to the router. For example, nonrestricted users can:

• Issue the virtual-router command in Privileged Exec mode, to switch to another previously created virtual router.
• Issue the virtual-router command in Global Configuration mode to create a new virtual router and switch to its context.
• Access Global Configuration mode to configure the router and virtual routers.
• View all settings for the router and all virtual routers.

User restricted to one or a set of specific VRs can see and use only a limited set of commands to monitor the status of those VRs and view some configuration settings on those VRs. More specifically, such users:

• Can issue the virtual-router command in Privileged Exec mode to switch to another previously configured VR to which they have access.
• Cannot create new VRs or access VRs other than those to which they have access.
• Cannot access Global Configuration mode and cannot configure VRs to which they have access.
• Cannot see or use any commands associated with the file system, boot settings, or system configuration.

The following table lists some, but not all, commands accessed from Exec mode that are available only to users with no VR restriction:

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.