Cisco Systems ONS 15600 manual Users IDs and Security Levels, User Privileges and Policies

C H A P T E R 5

Security

This chapter provides information about Cisco ONS 15600 user security. To provision security, refer to the Cisco ONS 15600 Procedure Guide.

Chapter topics include:

•5.1 Users IDs and Security Levels, page 5-1

•5.2 User Privileges and Policies, page 5-1

•5.3 Audit Trail, page 5-6

•5.4 RADIUS Security, page 5-7

5.1Users IDs and Security Levels

When you log in to an ONS 15600 for the first time, you use the CISCO15 user ID, which is provided with every ONS 15600 system. You can use the CISCO15 ID, which has Superuser privileges, to create other ONS 15600 user IDs. For detailed instructions about creating users, refer to the Cisco ONS 15600 Procedure Guide.

Each ONS 15600 permits up to 500 Cisco Transport Controller (CTC) or TL1 user IDs. A user ID is assigned one of the following security levels:

•Superuser—Users can perform all of the functions of the other security levels as well as set names, passwords, and security levels for other users.

•Provisioning—Users can access provisioning and maintenance options.

•Maintenance—Users can access only the ONS 15600 maintenance options.

•Retrieve—Users can retrieve and view CTC information but cannot set or modify parameters. See Table 5-3 on page 5-6for idle user timeout information for each security level.

By default, multiple concurrent user ID sessions are permitted on the node, that is, multiple users can log into a node using the same user ID. However, you can provision the node to allow only a single login per user and prevent concurrent logins for all users.

5.2 User Privileges and Policies

This section lists user privileges for each CTC action and describes the security policies available to Superusers for provisioning.

Cisco ONS 15600 Reference Manual, R7.2

5-1