Cisco Systems 15310-MA manual Security

CHAPT ER
5-1
Cisco ONS 15310-MA SDH Reference Manual, Release 9.1 and Release 9.2
78-19417-01
5
Security
This chapter provides information about Cisco ONS 15310-MA SDH user security. To provision
security, refer to the Cisco ONS 15310-MA SDH Procedure Guide.
Chapter topics include:
• 5.1 Users IDs and Security Levels, page 5-1
• 5.2 User Privileges and Policies, page 5-2
• 5.3 Audit Trail, page 5-7
• 5.4 RADIUS Security, page 5-8
5.1 Users IDs and Security Levels
A CISCO15 user ID is provided with the ONS 15310-MA SDH for use with initial login. Use this ID to
set up other ONS 15310-MA SDH user IDs. (For instructions, see the “Turn Up a Node” chapter in the
Cisco ONS 15310-MA SDH Procedure Guide.)
Note Cisco Transport Controller (CTC) does not display the CISCO15 user ID when you log in.
An ONS 15310-MA SDH node can support up to 500 user IDs. Each CTC or Transaction Language 1
(TL1) user ID can be assigned one of the following security levels:
• Retrieve—Users can retrieve and view CTC information but cannot set or modify parameters.
• Maintenance—Users can access only the ONS 15310-MA SDH maintenance options.
• Provisioning—Users can access provisioning and maintenance options.
• Superuser—Users can perform all of the functions of the other security levels as well as set names,
passwords, and security levels for other users.
By default, multiple concurrent user ID sessions are permitted on the node; that is, multiple users can
log into a node using the same user ID. However, you can provision the node to allow only a single login
per user ID and prevent concurrent logins for all users.
See Table 5-3 on page 5-6 for idle user timeout information for each security level.