Cisco Systems 10200 manual Managing Commands

Chapter 2 Managing BTS Users and Commands Using EMS

Managing Commands

Note All commands should be assigned to a work-group. If a command is not assigned to a work-group, a user will able to execute that command, which is not recommended. You can also assign users and the commands to multiple work-groups.

Managing Commands

Each command (verb-noun combination) has a security class of 1-10; 1 is lowest, 10 is highest. Each time a user enters a command, the system compares the user’s privilege level to the command’s security class. EMS denies the command if the user level is less than the command level.

The Command Level (command-level) table shows the 10 command security classes. BTS has the following presets:

•1 (lowest level)

•5 (mid-level)

•10 (highest level)—These commands require a system administrator with a security level of 10 to execute.

Table 2-2 Managing Commands

Task	Sample Command
Viewing a command’s security class	show command-level id=10;
Adding a description to a command’s	change command-level id=10; description=This is
security class	the highest level administration access;
Changing a command’s privilege level	change command-table noun=mgw; verb=add;
	sec-level=9;
Resetting a command’s privilege level	reset command-table noun=mgw; verb=add;
Viewing all executed commands	show history;
Sending all executed commands to a	report history;
report file	Note Results may take a few minutes to display.
Viewing the report of all executed	1.	In a web browser enter http://server name.
commands	2.	Click Reports.
	3.	Click history.html.
Viewing a security summary	report security-summary start-time=2002-09-26
	00:00:00; end-time=2002-09-27 00:00:00; source=all;
	Note Results may take a few minutes to display.
Viewing security summary reports	In a web browser enter https:// <ems ip addr>.

This chapter details the behaviors and attributes of the various security packages in the BTS 10200. The sources for the items are derived from many dynamic sources. Included in these sources are security bulletins from third-party vendors to the BTS 10200 as well as security agencies and open source organizations.

Cisco BTS 10200 Softswitch Operations and Maintenance Guide, Release 6.0.x

OL-16000-07 2-5