Chapter23 Router Properties
Router Access
23-12
Cisco Router and Security Device Manager Version 2.2 Users Guide
OL-4015-08
Note Protocols that require the retrieval of clear text passwords, such as CHAP, cannot
be used with MD5-encrypted passwords. MD5 encryption is not reversible. To
restore the password to clear text, you must delete the user acco unt and recreate
it without checking the Encrypt password option.
Privilege Level
Enter the privilege level for the user. When applied to a CLI command, that
command can only be executed by users with a privilege level equal to or higher
than the level set for the command.
Associate a View with the user
Check the Associate a View for this user option if you want to restrict user access
to a specific view. If you are associating a view to any user for the first time, you
will be prompted to enter the view password. This option is only available in the
Router Access node of the Additional Tasks tree.
View Name:
Select the view you want to associate with this user. Select from the following:
SDM_AdministratorA user associated to view type of SDM_Administrator
has complete access to SDM and all operations supported by SDM can be
performed.
SDM_MonitorA user associated to view type of SDM_Monitor is able to
monitor all the features supported by SDM. The user is not able to deliver
configurations using SDM. The user is able to navigate the various areas of
SDM, such as Interfaces and Connections, Firewall, and VPN. However, the
user interface components in these areas are be disabled.
SDM_FirewallA user associated to view type of SDM_Firewall is able to
use SDMs Firewall and Monitor features. The user can configure firewalls
and ACLs using the Firewall wizard, Firewall Policy View and the ACL
Editor. User interface components in other areas are disabled for this user.
SDM_EasyVPN_RemoteA user associated to view type
SDM_EasyVPN_Remote is able to use SDMs Easy VPN Remote features.
The user is able to create Easy VPN Remote connections and Edit them. User
interface components in other areas are disabled for this user.