Blade ICE G8000 manual End User Access Control, Considerations for configuring End User Accounts

RackSwitch G8000 Application Guide

End User Access Control

Blade OS allows an administrator to define end user accounts that permit end users to perform operation tasks via the switch CLI commands. Once end user accounts are configured and enabled, the switch requires username/password authentication.

For example, an administrator can assign a user, who can then log into the switch and perform operational commands (effective only until the next switch reboot).

Considerations for configuring End User Accounts

„A maximum of 10 user IDs are supported on the switch.

„Blade OS supports end user support for console, Telnet, BBI, and SSHv1/v2 access to the switch. As a result, only very limited access will be granted to the Primary Administrator under the BBI/SSH1 mode of access.

„If RADIUS authentication is used, the user password on the Radius server will override the user password on the G8000. Also note that the password change command on the switch only modifies the use switch password and has no effect on the user password on the Radius server. Radius authentication and user password cannot be used concurrently to access the switch.

„Passwords for end users can be up to 128 characters in length.

User Access Control

The end user access control commands allow you to configure end user accounts.

Setting up User IDs

Up to 10 user IDs can be configured. Use the following commands to define user names and passwords:

RS G8000 (config)# access user 1 name <1-8 characters>

RS G8000 (config)# access user 1 password

Changing user1 password; validation required:

Enter current admin password: <current administrator password>

Enter new user1 password: <new user password>

Re-enter new user1 password: <new user password>

New user1 password accepted.

36 „ Chapter 1: Accessing the Switch BMD00041, November 2008