Admin Guide

• Using a VRF context other than the GlobalRouter (VRF 0), you have limited functionality to
manage the system. For instance you can only manage the ports assigned to the specified
VRF instance
Specify the VRF instance name on the EDM screen when you launch a VRF context view. You can
use the context names (SNMPv3) and community strings (SNMPv1/v2) to assign different VRFs to
manage selected components, such as ports and VLANs. For more information about context
names and community strings, see Configuring Security on Avaya Virtual Services Platform 7200
Series and 8000 Series, NN47227-601.
ACLI passwords
The switch ships with default passwords set for access to ACLI through a console or Telnet session.
If you possess read-write-all access authority, and you use SNMPv3, then you can change
passwords in encrypted format. If you use Enterprise Device Manager (EDM), then you can also
specify the number of allowed Telnet sessions and rlogin sessions.
Important:
Be aware that the default passwords and community strings are documented and well known.
Avaya strongly recommends that you change the default passwords and community strings
immediately after the first logon.
For security, if you fail to log on correctly on the device in three consecutive instances, then the
device locks for 60 seconds.
The switch stores passwords in encrypted format and not in the configuration file.
Subscriber or administrative interaction
As a network administrator, you can configure the RADIUS server for user authentication to override
user access to commands. You must still provide access based on the existing access levels in the
switch, but you can customize user access by allowing and denying specific commands.
You must configure the following three returnable attributes for each user:
• Access priority (single instance)–the access levels currently available on the switch (ro, l1, l2,
l3, rw, rwa)
• Command access (single instance)–indicates whether the user has access to the commands
on the RADIUS server
• ACLI commands (multiple instances)–the list of commands that the user can or cannot use
Access policies for services
You can control access to the switch by creating an access policy. An access policy specifies the
hosts or networks that can access the switch through various services, such as Telnet, Simple
Network Management Protocol (SNMP), Hypertext Transfer Protocol (HTTP), Secure Shell version
2 (SSHv2), and remote login (rlogin). You can enable or disable access services by configuring
flags.
System access
October 2015 Administering Avaya VSP 7200 Series and 8000 Series 166
Comments on this document? [e-mail]