Forum Discussion

GreenWanderer_3's avatar
GreenWanderer_3
Icon for Nimbostratus rankNimbostratus
Aug 09, 2018

Default CLI Preferences for Remote Role Users

Hello,   I have been investigating configuring LTM to make users who log in via a remote-role (authenticating with TACACS) see a specific prompt at tmsh.   I understand that cli preferences are...
BIG-IP
cli preference
security
TMSH
jaikumar_f5's avatar
jaikumar_f5
Icon for MVP rankMVP
Aug 15, 2018

Hi,

 

The CLI preferences are user specific shell preferences, which I doubt could be controlled as a global parameter.

 

The behavior of cli preference settings are same for local and remote users, freely controlled by individual accounts.

 

  • If a local user (root) logins and make cli preference settings change, the preferences changes are applied to that particular localuser account (root) alone. Once the config is saved, the same can be seen on the bigip_users.conf file.

     

  • Similarly, if a tacacs user (abc123) logins and make cli preference settings change, the preferences changes are applied to that particular tacacs users id alone. Once the config is saved, the same can be seen on the bigip_users.conf file.

     

I haven't personally seen a global property which can be used to apply the preference for all.