Creating read-only user accounts on ScreenOS

jathan — Thu, 23 Jul 2009 17:06:24 +0000

Need to create a read-only account on a NetScreen (ScreenOS 6.x or lower) firewall?

It’s simple:

netscreen(M)-> set admin user nocadmin password abc123 privilege read-only

And there you have it. Now let’s test it:

% ssh nocadmin@netscreen
nocadmin@netscreen's password:
For Authorized Use Only, Violators Will Be Prosecuted.
netscreen(M)->

It works! Notice the limited command set available:

netscreen(M)-> ?
exit                 exit command console
get                  get system information
mtrace               multicast traceroute from source to destination
ping                 ping other host
trace-route          trace route
netscreen(M)->

Now hop to it!

jathanism » admin

Creating read-only user accounts on ScreenOS