...
| Property | Description |
|---|
| name (string; Default: ) | The name of the user group |
| policy (local | telnet | ssh | ftp | reboot | read | write | policy | test | winbox | password | web | sniff | sensitive | api | romon | dude | tikapp; Default: none) | List of allowed policies:
Login policies: - local - policy that grants rights to log in locally via console
- telnet - policy that grants rights to log in remotely via telnet
- ssh - policy that grants rights to log in remotely via secure shell protocol
- web - policy that grants rights to log in remotely via WebFig.
- winbox - policy that grants rights to log in remotely via WinBox and bandwidth test authentication
- password - policy that grants rights to change the password
- api - grants rights to access router via API.
- tikapp - policy that grants rights to log in remotely via Tik-App.
- dude - grants rights to log in to dude server.
- ftp - policy that grants full rights to log in remotely via FTP, to read/write/erase files and to transfer files from/to the router. Should be used together with read/write policies.
- romon - policy that grants rights to connect to RoMon server.
Config Policies: - reboot - policy that allows rebooting the router
- read - policy that grants read access to the router's configuration. All console commands that do not alter router's configuration are allowed. Doesn't affect FTP
- write - policy that grants write access to the router's configuration, except for user management. This policy does not allow to read the configuration, so make sure to enable read policy as well
- policy - policy that grants user management rights. Should be used together with the write policy. Allows also to see global variables created by other users (requires also 'test' policy).
- test - policy that grants rights to run ping, traceroute, bandwidth-test, wireless scan, snooper, and other test commands
- sensitive - grants rights to change "hide sensitive" option, if this policy is disabled sensitive information is not displayed, see below list as to what is regarded as sensitive.
- sniff - policy that grants rights to use packet sniffer tool.
|
| skin (name; Default: default) | Used skin for WebFig |
...
| Code Block |
|---|
|
/user active print |
Command The command shows the currently active users along with respective statistics information.
...
| Property | Description |
|---|
| accounting (yes | no; Default: yes) |
|
| exclude-groups (list of group names; Default: ) | Exclude-groups consists of the groups that should not be allowed to be used for users authenticated by radius. If the radius server provides a group specified in this list, default-group will be used instead.
This is to protect against privilege escalation when one user (without policy permission) can change the radius server list, set up it's its own radius server and
log in as admin. |
| default-group (string; Default: read) | User group used by default for users authenticated via a RADIUS server. |
| interim-update (time; Default: 0s) | Interim-Update time interval |
| use-radius (yes |no; Default: no) | Enable user authentication via RADIUS |
...
When importing ssh key by /user ssh-keys import the command you will be asked for two parameters:
...
This menu is used to import and list imported private keys. Private keys are used to verify the public keys of remote devices.
...
When importing ssh keys from this sub-menu using /user ssh-keys private the import command you will be asked for three parameters:
...