Configuring Web User Accounts - AudioCodes Mediant 1000 User Manual

3.3

Configuring Web User Accounts

To prevent unauthorized access to the Web interface, two Web user accounts are available
(primary and secondary) with assigned user name, password, and access level. When you
login to the Web interface, you are requested to provide the user name and password of
one of these Web user accounts. If the Web session is idle (i.e., no actions are performed)
for more than five minutes, the Web session expires and you are once again requested to
login with your user name and password. Up to five Web users can simultaneously open
(log in to) a session on the device's Web interface. Users can be banned for a period of
time upon a user-defined number of unsuccessful login attempts. Login information (such
as how many login attempts were made and the last successful login time) can be
presented to the user.
Each Web user account is composed of three attributes:

User name and password: enables access (login) to the Web interface.

Access level: determines the extent of the access (i.e., availability of pages and read
/ write privileges). The available access levels and their corresponding privileges are
listed in the table below:
Table 3-5: Web User Accounts Access Levels and Privileges
Access Level
Security Administrator
Administrator
User Monitor
No Access
* The numeric representation of the access level is used only to define accounts in a RADIUS server
(the access level ranges from 1 to 255).
The default attributes for the two Web user accounts are shown in the following table:
Table 3-6: Default Attributes for the Web User Accounts
Account / Attribute
Primary Account
Secondary Account
SIP User's Manual
Numeric
Representation*
200
100
50
0
User Name
(Case-Sensitive) (Case-Sensitive)
Admin
User
66
Mediant 600 & Mediant 1000
Privileges
Read / write privileges for all pages.
read / write privileges for all pages except
security-related pages, which are read-only.
No access to security-related and file-loading
pages; read-only access to the other pages.
This read-only access level is typically applied to
the secondary Web user account.
No access to any page.
Password
Admin Security Administrator
Note: The Access Level cannot
be changed for this account type.
User
Access Level
User Monitor
Document #: LTRT-83310