Managing Switch User Accounts

Setting Up End-User Profiles

 

 

 

 

Creating End-User Profiles

To set up an end-user profile, use the end-user profile command and enter a name for the profile. Specify read-only or read-write access to particular command areas. The profile can also specify port ranges and/ or VLAN ranges. The port ranges and VLAN ranges must be configured on separate command lines and are discussed in the next sections.

In this example, a profile is created with access to physical commands on the switch:

-> end-user profile Profile3 read-write physical

A profile named Profile3 is now available on the switch and may be associated with a user through the user command.

Note that if port ranges or VLAN ranges are not configured, a any commands that require port or VLAN values or view any values.

user with this profile will not be able to use show outputs that contain port or VLAN

Setting Up Port Ranges in a Profile

To set up port ranges for a profile, enter the end-user profile port-listcommand with the relevant profile name and the desired slots/ports. For example:

-> end-user profile Profile3 port-list 2 3/1-4

In this example, the port list includes all ports in slot 2, and ports 1 through 4 on slot 3. A user with this profile will be able to manage these ports (depending on the command areas specified in the profile).

To remove a port list, use the no form of the command with the relevant slot number(s). All ports in the port list on a given slot will be removed. For example:

-> end-user profile Profile3 no port-list 3

In this example, all ports on slot 3 are removed from the profile.

Setting Up VLAN Ranges in a Profile

To set up VLAN ranges for a profile, enter the end-user profile vlan-rangecommand with the relevant profile name and the desired VLAN range. For example:

->end-user profile Profile3 vlan-range 2-4 7-8

In this example, the VLAN range includes VLANs 2, 3, 4, 7, and 8. A user with this profile will be able to manage these VLANs (depending on the command areas specified in the profile).

To remove a VLAN range from a profile, use the no form of the command and the VLAN ID of the start of the range to be removed. For example:

-> end-user profile Profile3 no vlan-range 7

This command removes VLANs 7 and 8 from Profile3.

OmniSwitch 6600 Family Switch Management Guide March 2005

page 7-15

Page 171
Image 171
Alcatel Carrier Internetworking Solutions omniswitch manual Creating End-User Profiles, Setting Up Port Ranges in a Profile

omniswitch specifications

Alcatel Carrier Internetworking Solutions offers the OmniSwitch series, renowned for its robust capabilities in delivering high-performance networking solutions tailored for a variety of enterprise and service provider environments. The OmniSwitch series is particularly recognized for its scalability, flexibility, and the depth of its feature set, making it a popular choice for organizations that demand reliable and efficient networking solutions.

One of the standout features of the OmniSwitch series is its advanced Layer 2 and Layer 3 switching capabilities, providing organizations with essential support for IP routing and robust Ethernet networking. This versatility ensures that the switch can seamlessly integrate into existing network architectures, facilitating smooth upgrade paths in response to evolving business needs. The OmniSwitch includes support for multiple protocols like RIP, OSPF, and BGP, making it suitable for complex networking topologies.

In terms of performance, OmniSwitch devices are engineered to handle high bandwidth demands. With features such as hardware-based forwarding, they ensure low latency and minimal packet loss, which are critical for applications sensitive to delays such as VoIP and video conferencing. Furthermore, they support Power over Ethernet (PoE), allowing users to power devices like IP phones and security cameras directly through the network.

Security is another key characteristic of the OmniSwitch series. It includes advanced security features such as robust access control lists (ACLs), port security, and built-in support for IEEE 802.1X authentication. These features collectively enhance the security posture of the network, protecting sensitive data and ensuring that only authorized devices can access the network resources.

The OmniSwitch is also designed with redundancy and reliability in mind. Features like Rapid Spanning Tree Protocol (RSTP) and Virtual Router Redundancy Protocol (VRRP) ensure that network uptime is maximized and that failover is swift in the event of a hardware failure. This makes it a viable option for organizations that cannot afford downtime.

In addition to these features, Alcatel's OmniSwitch series comes equipped with a user-friendly management interface. This interface simplifies the setup, configuration, and monitoring of the network, making it accessible even to those with limited networking expertise. Through intuitive dashboards and support for SNMP, administrators can manage their networks effectively.

In conclusion, Alcatel Carrier Internetworking Solutions' OmniSwitch series offers a comprehensive suite of features tailored to meet the needs of modern networks. With its blend of performance, scalability, security, and ease of management, the OmniSwitch stands out as a preferred choice for businesses seeking to enhance their networking infrastructure.