Table of Contents
Advertisement
•
The serial session defaults to 9600 BAUD, eight data bits, one stop bit, no
parity and no flow control (115200 for the N1100-ON, N2100-ON, and
N3100-ON).
User Accounts Management
The CLI provides authentication for users either through remote
authentication servers supporting TACACS+ or Radius or through a set of
locally managed user accounts. The setup wizard asks the user to create the
initial administrator account and password at the time the system is booted.
The following rules and specifications apply:
•
The administrator may create additional administrator accounts.
•
User accounts have an associated privilege level, a user name, and a user
password.
•
The administrator is able to delete the administrator accounts.
•
The password is saved internally in encrypted format and never appears in
clear text anywhere on the CLI.
•
The CLI supports TACACS+ and Radius authentication servers.
•
The CLI allows the administrator to configure primary and secondary
authentication servers. If the primary authentication server fails to respond
within a configurable period, the CLI automatically tries the secondary
authentication server.
•
The administrator can specify whether the CLI should revert to using local
accounts when the remote authentication servers do not respond or if the
CLI simply fails the login attempt because the authentication servers are
down. This capability applies only when the administrator is logged in
through a telnet or an SSH session.
•
The CLI always allows the administrator to log in to a local serial port even
if the remote authentication server(s) are down. In this case, CLI reverts to
using the locally configured accounts to allow the administrator to log in.
User Access Control
In addition to authenticating an administrator, the CLI also assigns the
administrator access to one of two security levels. Privilege level 1 has read-
only access. This level allows the administrator to read information but not
Using the CLI
248
Advertisement
Table of Contents
