Symmetricom 1000, 1100 Defining a User at the Security Access Level, TimeProvider Access Levels

Chapter 4 Provisioning the TimeProvider

Defining the Security Parameters

User – Users entered into the user list at the User level can issue commands set at the User access level

Admin – Users entered into the user list at the Admin level can issue commands set at the Admin access level

Security – Users at this access level can issue every command available

You can edit the commands available at each access level using the ED-CMD- SECU command. You can display the current access level for each command by issuing the RTRV-CMD-SECU command. See the TimeProvider TL1 Reference Guide for details on these commands. Record the values you provision in Table 4-4.

The first person to log into the TimeProvider is automatically assigned the Security access level (described in Defining a User at the Security Access Level, on page 95); this person normally performs the initial provisioning and defines users and their appropriate access levels.

Defining a User at the Security Access Level

Recommendation: To avoid a possible service call to unlock the TimeProvider, Symmetricom recommends that you enable the security feature by defining a user at the Security access level.

TimeProvider Access Levels

The security measures built into the TimeProvider are based on a list of users authorized to access the unit. Each user has their own password and is assigned to one of the following access levels: NONE, USER, ADMIN, or SECURITY. Users can issue the TL1 commands available at their access level. Managing the User List, on page 96, describes how to manage the user list.

If you do not define a Security-level user, the security features are not enabled and an unauthorized user could gain access to the TimeProvider and compromise the security of your network.

Note: The factory default security setting is None, which allows all users to access the system.

If you define a user at a level other than Security before you define a Security-level user, you cannot execute Security-level commands. You will need to contact Symmetricom Global Services (see Obtaining Technical Assistance, on page 187) to correct this problem.

Recommendation: Symmetricom recommends that you record and store the Security-level user’s name and password in a secure location.

097-58001-02 Revision G – April 2008 TimeProvider User’s Guide 95