Cisco Systems MGX 8220 manual User Accounts and Privilege Levels, Passwords

Chapter

User Accounts and Privilege Levels

User Accounts and Privilege Levels

The Cisco MGX 8220 includes built-in security features to prevent unauthorized use of the system. The security features require that each user on the system have a valid account (specified by a userID), password, and privilege level.

The combination of account, password, and privilege level determines which commands the user can enter.

The account (userID) and privilege level are assigned using the adduser command. There is a default password which is used the first time a user logs in. When logged in, the user can change the password to a personal password with the cnfpwd configure password command.

This section describes the following topics:

•Accounts, page 3-7

•Privilege Levels, page 3-7

•Passwords, page 3-7

Accounts

Each user is assigned an account (userID), which is specified as a parameter in the adduser command. The userID consists of up to 12-alphanumeric characters including letters, numbers, a hyphen, and an underscore. UserIDs are case sensitive.

When a user attempts to log in, the system prompts for a valid userID.

The Cisco MGX 8220 shelf permits one supervisor account and 63 user accounts. The Cisco MGX 8220 shelf ships with a preconfigured superuser account.

Privilege Levels

Each account is assigned a privilege level when the account is established with the adduser command. Only an established user can enter the adduser command to open a new account. The account you create can only have a privilege level at the same or lower level than your own privilege level.

All commands have an assigned privilege level. A command can only be enter by a user whose privilege level is equal to or above the privilege level of the command. There is one superuser privilege level and six user levels designated 1 to 6 (with 1 being the highest).

Passwords

A default password is used the first time users log in. When users are logged on, they can change the password entering the cnfpwd command.

The password must consist of 6 to 15 characters. Only letters, numbers, a hyphen, an underscore, and spaces are allowed. The password is case sensitive. For security, the password is not displayed as it is entered.

When a user attempts to log in, the system prompts for a valid password after the userID prompt has been entered. The user must respond with the account’s valid password.

	Cisco MGX 8220 Installation and Configuration
Release 5.0, Part Number 78-6430-03 Rev. D0, November 2003		3-7