Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation

Using Junos OS to Configure Logical System Administrators

Using Junos OS, you can partition a single router or switch into multiple logical devices that perform independent routing or switching tasks. When creating logical systems, you must configure logical system administrators and interfaces, assign logical interfaces to logical systems, and configure various other logical system statements.

The master administrator can assign one or more logical system administrators to each logical system. Once assigned to a logical system, administrators are restricted to viewing only configurations of the logical system to which they are assigned and accessing only the operational commands that apply to that particular logical system. This restriction means that these administrators cannot access global configuration statements, and all command output is restricted to the logical system to which the administrators are assigned.

To configure logical system administrators, include the logical-system logical-system-name statement at the [edit system login class class-name] hierarchy level and apply the class to the user. For example:

[edit]
system {login {class admin1 {permissions all;logical-system logical-system-LS1;}class admin2 {permissions view; # Gives users assigned to class admin2 the ability to view
# but not to change the configuration.logical-system logical-system-LS2;}user user1 {class admin1;}user user2 {class admin2;}}}

Fully implementing logical systems requires that you also configure any protocols, routing statements, switching statements, and policy statements for the logical system.

 

Related Documentation

 

Published: 2013-01-23

Previous Page Next Page