User manual

Wide Bank 28 DS3 - Release 2.4 July 2004 6-11
Configuration
Basic Configuration
Access Levels (Security Upgrade Option)
With the Security Upgrade option, there are four access levels available for CLI users:
 secu – The secu user has access to all commands and has the sole authority to grant others
access to the system by adding and deleting user names and passwords. The secu user
also has sole authority to perform such functions as clearing all statistics and logs,
configuring IP settings, restoring factory default or previously saved configurations, and
configuring the TL1 interface. There can be only one secu user (always named
"security") within the system.
 admin – An admin user has access to all commands except those assigned exclusively to
the secu user. Functions available to the admin user that are not available to lower-level
users include clearing DS1 and DS3 statistics, copying a configuration from the active to
standby Controller, setting the system time and date, programming the flash memory,
saving a configuration to a TFTP server file, setting various security functions,
configuring SNMP, and copying the current configuration to temporary storage.
 rw (read/write) – An rw user has access to all commands except those assigned
exclusively to the secu and admin users. The rw users are typically responsible for the
day-to-day operation of the system.
 ro (read only) – An ro user is limited to commands that display status and reports. The
ro access level permits technicians to monitor system operation and performance, but
prevents them from altering settings.
Password Protection (Security Upgrade Option)
Wide Banks equipped with the Security Upgrade option are shipped with password protection
disabled (security off). You may choose to enable password protection (security on) and set
passwords for users to prevent unauthorized system access.
With security off, login is accomplished simply by pressing the Enter key. No password is
required, and the user is considered to be secu.
If security is on, login requires that you type a user name and password when prompted. Only
the secu user may modify passwords.
NOTE: With the Security Upgrade option, user names must include from 8 to 10
alphanumeric characters and must not contain spaces. User names are case-sensitive.
Passwords must be from 8 to 10 characters and are case-sensitive. Passwords must
contain at least one each of the following types of characters: upper-case alphabetic,
lower-case alphabetic, numeric, and special characters. The permitted special characters
are listed with the user command (see USER on page 8-82).
If you are upgrading firmware in an existing Wide Bank, previously defined user names
and passwords that contain fewer than 8 characters will be preserved. Blank passwords
are also preserved.