kerberos-snooping-profile (system view)

Function

The kerberos-snooping-profile command creates a Kerberos snooping profile and displays the Kerberos snooping profile view.

The undo kerberos-snooping-profile command deletes a Kerberos snooping profile.

By default, no Kerberos snooping profile is created.

Format

kerberos-snooping-profile name profile-name

undo kerberos-snooping-profile name profile-name

Parameters

Parameter	Description	Value
name profile-name	Specifies the name of a Kerberos snooping profile.	The value is a string of 1 to 31 case-sensitive characters, which cannot be configured to - and --. It cannot contain spaces and the following special characters: / \ : * ? " < > \| @ ' %.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

In a Kerberos authentication scenario, you need to enable Kerberos snooping on the device, so that the device can control network access rights of users. Only authenticated users can access network resources. To achieve this, you need to create a Kerberos snooping profile on the device and set parameters in the profile first.

Example

# Create a Kerberos snooping profile named profile1.

<HUAWEI> system-view
[HUAWEI] kerberos-snooping-profile name profile1
[HUAWEI-krb-snooping-profile-profile1]