Re: how to use system login class super-user-local confirm-commands
Some commands when executed might have big impact in the network, such as:
clear ospf database
request fpc offline
confirm-commands knob helps the user decide which commands are catastrophic and require explicit confirmation.
This knob doesn't work with intentional configuration changes (set commands). With configuration change (set commands) user already has rollback and commit confirm options to bring the device back into original state.
If I add following configuiration in the example I had shared in previous reply, the clear firewall will ask to confirm but set firewall will still work
set system login class test confirm-commands firewall confirm-before-change-in-firewall
test@chaos-re1# run clear firewall all
confirm-before-change-in-firewall [yes,no] (no) no
test@chaos-re1# set firewall family inet filter test101 term 1 then accept