End user access control, Considerations for configuring end user accounts, User access control – Blade ICE G8000 User Manual

Page 36: End user access control 36

Advertising
background image

RackSwitch G8000 Application Guide

36

„

Chapter 1: Accessing the Switch

BMD00041, November 2008

End User Access Control

Blade OS allows an administrator to define end user accounts that permit end users to perform
operation tasks via the switch CLI commands. Once end user accounts are configured and
enabled, the switch requires username/password authentication.

For example, an administrator can assign a user, who can then log into the switch and perform
operational commands (effective only until the next switch reboot).

Considerations for configuring End User Accounts

„

A maximum of 10 user IDs are supported on the switch.

„

Blade OS supports end user support for console, Telnet, BBI, and SSHv1/v2 access to the
switch. As a result, only very limited access will be granted to the Primary Administrator
under the BBI/SSH1 mode of access.

„

If RADIUS authentication is used, the user password on the Radius server will override
the user password on the G8000. Also note that the password change command on the
switch only modifies the use switch password and has no effect on the user password on
the Radius server. Radius authentication and user password cannot be used concurrently to
access the switch.

„

Passwords for end users can be up to 128 characters in length.

User Access Control

The end user access control commands allow you to configure end user accounts.

Setting up User IDs

Up to 10 user IDs can be configured. Use the following commands to define user names and
passwords:

RS G8000 (config)# access user 1 name <

1-8 characters>

RS G8000 (config)# access user 1 password

Changing user1 password; validation required:

Enter current admin password:

<current administrator password>

Enter new user1 password:

<new user password>

Re-enter new user1 password:

<new user password>

New user1 password accepted.

Advertising