4 feature access level configuration, 5 terminology – CANOGA PERKINS 9145ELB NID Software Version 4.01 User Manual

Page 13

Advertising
background image

Introduction

9145ELB NID Software User’s Manual

Feature Access Level Configuration

3

1.4 Feature Access Level Configuration

The 9145ELB has a default assignment of access levels. Creating and downloading a text file
called 9145E.cap to the 9145ELB can change this assignment. This file contains mappings
between module features and the access level required to access the feature.

As an example the entry that controls access to the Maximum Frame Size setting looks like
maxFrameSize=operator. This entry indicates that to change the Maximum Frame Size, a user’s
account must have “operator” access level or greater.

The default 9145E.cap file containing the 9145ELB built-in security rules is provided with the
9145ELB release. To modify the security rules, simply modify the provided 9145E.cap file and
download this modified file to the 9145ELB. The 9145E.cap file is downloaded to the 9145ELB
via the normal FTP/SFTP/TFTP in the same manner as downloading a firmware file to the
9145ELB (see sections 8.4 and 8.5). The same file may be downloaded to multiple 9145ELBs to
ensure the same security rules.

If the file 9145E.cap is not downloaded to the 9145ELB, then the default access level mappings
in the 9145ELB are used. If a feature is not present in the file “9145E.cap” that is downloaded to
the 9145ELB, then the default access level mapping in the 9145ELB is used. If errors are found
in this file, these errors are displayed in the system log.

1.5 Terminology

The following terms and acronyms are used in this manual.

Term

Description

AFEF

Assured Forwarding Expedited Forwarding

CEN

Carrier Ethernet Network

CFM

Connectivity Fault Management

CoS

Class of Service

CRC

Cyclic Redundancy Check

C-VID

Customer VLAN Identification

DSCP

Differentiated Service Code Point

EVC

Ethernet Virtual Connection

EVPL

Ethernet Virtual Private Line

HDLC

High-Level Data Link Control

LAG

Link Aggregation Group

LCAS

Link Capacity Adjustment Scheme

LLQ

Low Latency Queue

MEN

Metro Ethernet Network

Advertising