Dear all,

When SSH into my AP, the user would be able to browse all folders and run whatever commands.

I need to do a special terminal like the Cisco switch/router terminal where when user SSH, they are not able to see any of folder, they are allowed to run limited commands like ls, pwd, ifconfig, enable.

I no idea how to start it? Can you please hint me. Thanks a lot!

To a certain extent, you can archieve this by creating a non-root user and using him to log in. With sudo, you can let him run certain commands as root.