Tavve zoneranger User Manual page 131

Figure 34-17. Configuration > Access Control page Users tab
Updating user information
The Configuration > Access Control page Users tab is used to configure user access to the
ZoneRanger. User access is controlled for the web interface, Telnet, and SSH. By default,
ZoneRanger is initially configured with two users, and . The default password
operator admin
for is , and the default password for is . You can modify the
operator operator admin admin
security level and change passwords for existing users, delete existing users, and add new users.
For new users, you can configure user IDs, security levels, and passwords. Passwords must be
at least five alphanumeric characters.
In addition to user authentication, ZoneRanger maintains two security levels to access particular
ZoneRanger functions; remote database access and the text configuration menu. The Setup
User security level is used to access the text configuration menu for initial setup of the
ZoneRanger via telnet, SSH and a connected console. By default the user is and the
setup
password is . The user and the password for the Setup User security level may both be
setup
changed. The password must contain at least five alphanumeric characters. Special characters
are not accepted
The database user security level allows for remote, read-only database access using a joined
Ranger Gateway. The user name is By default, the password is . The
ranger_ro. readonly
password may be changed and must contain at least five alphanumeric characters. Special
characters are not accepted. When accessing the database, the database name is .
rangerDb
Configuring TACACS+
The Configuration > Access Control page TACACS+ tab allows for the configuration of
ZoneRanger TACACS+ proxy for authentication of managed nodes as well as TACACS+
authentication on the ZoneRanger itself. At least one Server Group (see Chapter 17) must be
created before TACACS+ proxy configuration can be accomplished. TACACS+ authentication
of the ZoneRanger itself may be proxied through a Ranger Gateway, which requires at least one
Server Group, or may be configured to communicate directly to a TACACS+ server.
ZoneRanger 5.5 User's Guide 131