User`s manual

Mediant 2000 & TP-1610 & TP-260
SIP User's Manual 56 Document #: LTRT-68805
5.2.1 User Accounts
To prevent unauthorized access to the Embedded Web Server, two user accounts are
available, a primary and secondary. Each account is composed of three attributes:
username, password and access level. The username and password enable access to the
Embedded Web Server itself; the access level determines the extent of the access (i.e.,
availability of screens and read / write privileges). Note that additional accounts can be
defined using a RADIUS server (refer to Section
13.3 on page 294).
Table
5-1 lists the available access levels and their privileges.
Table 5-1: Available Access Levels and their Privileges
Access Level
Numeric
Representation*
Privileges
Security Administrator
200
Read / write privileges for all screens
Administrator
100
Read-only privilege for security-related screens and
read / write privileges for the others
User Monitor
50
No access to security-related and file-loading
screens and read-only access to the others
No Access
0
No access to any screen
* The numeric representation of the access level is used only to define accounts in a RADIUS server (the
access level ranges from 1 to 255).
The access level mechanism operation is as follows (for both Web and RADIUS accounts):
Each Web screen features two (hard-coded) minimum access levels, read and write. The
read access level determines whether the screen can be viewed. The write access level
determines whether the information in the screen can be modified.
When a user tries to access a specific Web screen, his access level is compared with the
access levels of the screen:
 If the access level of the user is less than the screen’s read access level, the screen
cannot be viewed.
 If the access level of the user is equal to or greater than the screen’s read access
level but less than the write access level, the screen is read only.
 If the access level of the user is equal to or greater than the screen’s write access
level, the screen can be modified.
The default attributes for the two accounts are shown in Table
5-2 below:
Table 5-2: Default Attributes for the Accounts
Account / Attribute Username
(Case-Sensitive)
Password
(Case-Sensitive)
Access Level
Primary Account Admin Admin Security Administrator*
Secondary Account User User User Monitor
* The access level of the primary account cannot be changed; all other account-attributes can be modified.
The first time a browser request is made, users are requested to provide their account’s
username and password to obtain access. If the Embedded Web Server is left idle for more
than five minutes, the session expires and the user is required to re-enter his username
and password.