Disable account on Brocade

in ,

Brocade has a brocade-privlvl which I like. It maps priv-lvl to brocade-privlvl, but the result is an account that has some privileges. Here is an example of how to map brocade-privlvl = 5 which has no modification rights. Unfortunately, it does require you to put in the IP's of your gear. (Nexus and Cisco pairs were different enough to distinguish between them, but Brocade pairs mimic Cisco pairs) It also requires v1.91 or greater. The following group would go before other groups and assumes you define a priv-vlv (of any number) in your tac\_plus config: [brocade\_readonly]
host\_allow =
    .*
device\_permit =
    192.168.1.*
command_permit =
    .*
av\_pairs =
    priv-lvl,brocade-privlvl=5