extreme-aaa

Provides a data model for configuring authentication, authorization, and accounting (AAA).

Top-level container

module: extreme-aaa
   +--rw aaa-config
   |  +--rw aaa
   |     +--rw authentication
   |     |  +--rw login
   |     |     +--rw first?    enumeration
   |     |     +--rw second?   enumeration
   |     +--rw accounting
   |     |  +--rw exec
   |     |  |  +--rw defaultacc
   |     |  |     +--rw start-stop
   |     |  |        +--rw server-type?   acc_srv_type
   |     |  +--rw commands
   |     |     +--rw defaultacc
   |     |        +--rw start-stop
   |     |           +--rw server-type?   acc_srv_type
   |     +--rw authorization
   |        +--rw command
   |           +--rw firstauthor?    enumeration
   |           +--rw secondauthor?   enumeration
   +--rw username* [name]
   |  +--rw name                string
   |  +--rw user-password       user-passwd
   |  +--rw encryption-level?   enumeration
   |  +--rw role                string
   |  +--rw desc?               string
   |  +--rw enable?             username-enable
   |  +--rw expire?             date
   |  +--rw access-time?        string
   |  +--rw end-time?           string
   +--rw service
   |  +--rw password-encryption?   empty
   +--rw user
   |  +---x unlock    
   |     +---w input     
   |     |  +---w username    string
   |     +--ro output    
   |        +--ro Result?   string
   +--rw role
   |  +--rw name* [name]
   |     +--rw name    string
   |     +--rw desc?   string
   +--rw radius-server
   |  +--rw host* [hostname use-vrf]
   |     +--rw hostname                 string
   |     +--rw use-vrf                  common-def:vrf-name
   |     +--rw radius-server-options
   |        +--rw auth-port?          rad-auth-port
   |        +--rw protocol?           rad-auth-protocols
   |        +--rw key?                string
   |        +--rw encryption-level?   enumeration
   |        +--rw retries?            uint32
   |        +--rw timeout?            uint32
   |        +--rw source-interface
   |           +--rw source-interface-name?    track-iftype
   |           +--rw source-interface-value?   union
   +--rw tacacs-server
   |  +--rw host* [hostname use-vrf]
   |  |  +--rw hostname                 string
   |  |  +--rw use-vrf                  common-def:vrf-name
   |  |  +--rw tacacs-server-options
   |  |     +--rw port?               tac-auth-port
   |  |     +--rw protocol?           tac-auth-protocols
   |  |     +--rw key?                string
   |  |     +--rw encryption-level?   enumeration
   |  |     +--rw retries?            uint8
   |  |     +--rw timeout?            uint8
   |  +--rw tacacs-source-ip?   srcip_type
   +--rw ldap-server
   |  +--rw host* [hostname use-vrf]
   |  |  +--rw hostname               string
   |  |  +--rw use-vrf                common-def:vrf-name
   |  |  +--rw ldap-server-options
   |  |     +--rw port?      ldap-auth-port
   |  |     +--rw retries?   uint8
   |  |     +--rw timeout?   uint8
   |  |     +--rw basedn?    string
   |  +--rw maprole
   |     +--rw group* [ad-group]
   |        +--rw ad-group       string
   |        +--rw switch-role    string
   +--rw password-attributes
   |  +--rw min-length?              uint32
   |  +--rw max-retry?               uint32
   |  +--rw max-lockout-duration?    uint32
   |  +--rw character-restriction
   |  |  +--rw upper?          uint32
   |  |  +--rw lower?          uint32
   |  |  +--rw numeric?        uint32
   |  |  +--rw special-char?   uint32
   |  +--rw admin-lockout-enable?    empty
   +--rw banner
   |  +--rw login?      string
   |  +--rw motd?       string
   |  +--rw incoming?   string
   +--rw rule* [index]
   |  +--rw index        uint32
   |  +--rw action?      rule-action
   |  +--rw operation?   rule-operation
   |  +--rw role?        string
   |  +--rw command
   |     +--rw (cmdlist)?
   |        +--:(container-cmds)
   |        |  +--rw enumList?                    enumeration
   |        +--:(interface-a)
   |        |  +--rw interface-int
   |        |     +--rw interface-cont!
   |        +--:(interface-c)
   |        |  +--rw interface-eth
   |        |     +--rw interface
   |        |        +--rw ethernet-cont!
   |        +--:(interface-e)
   |        |  +--rw interface-eth-leaf
   |        |     +--rw interface
   |        |        +--rw ethernet-leaf?   interface:interface-type
   |        +--:(interface-f)
   |        |  +--rw interface-mgmt
   |        |     +--rw interface
   |        |        +--rw management-cont!
   |        +--:(interface-i)
   |        |  +--rw interface-pc
   |        |     +--rw interface
   |        |        +--rw port-channel-cont!
   |        +--:(interface-j)
   |        |  +--rw interface-pc-leaf
   |        |     +--rw interface
   |        |        +--rw port-channel-leaf?   interface:portchannel-type
   |        +--:(interface-m)
   |        |  +--rw interface-management-leaf
   |        |     +--rw interface
   |        |        +--rw management-leaf?   interface:man-interface-type
   |        +--:(interface-n)
   |        |  +--rw interface-loopback
   |        |     +--rw interface
   |        |        +--rw loopback-cont!
   |        +--:(interface-o)
   |        |  +--rw interface-loopback-leaf
   |        |     +--rw interface
   |        |        +--rw loopback-leaf?   loopback-intf:intf-loopback-port-type
   |        +--:(interface-p)
   |        |  +--rw interface-ve
   |        |     +--rw interface
   |        |        +--rw ve-cont!
   |        +--:(interface-q)
   |        |  +--rw interface-ve-leaf
   |        |     +--rw interface
   |        |        +--rw ve-leaf?   interface:ve-type
   |        +--:(copy-a)
   |        |  +--rw copy-cp
   |        |     +--rw copy-cont!
   |        +--:(copy-b)
   |        |  +--rw copy-running
   |        |     +--rw copy
   |        |        +--rw running-config-cont!
   |        +--:(copy-c)
   |        |  +--rw copy-support
   |        |     +--rw copy
   |        |        +--rw support-cp!
   |        +--:(clear-a)
   |        |  +--rw clear-cl
   |        |     +--rw clear-cont!
   |        +--:(clear-b)
   |        |  +--rw clear-logging
   |        |     +--rw clear
   |        |        +--rw logging-cont!
   |        +--:(clear-c)
   |        |  +--rw clear-support
   |        |     +--rw clear
   |        |        +--rw support-cl!
   |        +--:(protocol-a)
   |        |  +--rw protocol-pr
   |        |     +--rw protocol-cont!
   |        +--:(protocol-b)
   |        |  +--rw protocol-spanning
   |        |     +--rw protocol
   |        |        +--rw spanning-tree-cont!
   |        +--:(protocol-c)
   |           +--rw protocol-lldp
   |              +--rw protocol
   |                 +--rw lldp-cont!
   +--rw root-sa
   |  +--rw root
   |     +--rw enable?   empty
   |     +--rw access?   root_access_type
   +--rw alias-config
      +--rw alias* [name]
      |  +--rw name         string
      |  +--rw expansion    string
      +--rw user* [name]
         +--rw name     string
         +--rw alias* [name]
            +--rw name         string
            +--rw expansion    string