Create read-only ssh user to HP-1950

irbk — Mon, 27 Feb 2023 03:55:53 GMT

Hopefully I'm in the right place for this question.

I'm the new net admin at a company with a bunch of HP-1950's. We are implementing an SNMP monitoring system. I've got the v3 SNMP all set up and it's working great. One of the other things that the monitoring solution can do is a config dif, where you can be alerted to changes in configs. However, the only way to make this happen is if I give the monitoring solution SSH access to the switch. Not a huge problem creating an SSH only user on the switch, but then everything falls apart. I can't figure out how to limit the SSH access to read only. It seems the SSH user either has full access or no access. In the end what the SSH user needs to be able to do (and this will be done via script) is run the following

xtd-cli-mode

screen-length disable

display current-configuration

quit

I'm at a loss to try and figure out how to do this. My google fu has failed me and the documentation for the 1950's isn't great. The manual gives more info on password complexity than how to set up custom access levels. It tells you that it's possible but sort of neglects to tell you how to do it.

Re: Create read-only ssh user to HP-1950

Sunitha_Mod — Mon, 27 Feb 2023 03:54:01 GMT

Hello @irbk,

Thank you for reaching out to us!

HPE Networking forum has moved to Aruba Airheads Community and for HPE networking and Aruba product queries, request you to visit and post your query here: Aruba Airheads Community

You can refer to the below link as well for more details:

HPE Networking forum migration to Aruba Airheads c... - Hewlett Packard Enterprise Community

topic Re: Create read-only ssh user to HP-1950 in Other HPE Product Questions

Create read-only ssh user to HP-1950

Re: Create read-only ssh user to HP-1950