User Accounts - 3Com V7122 User Manual

User Accounts

To prevent unauthorized access to the Embedded Web Server, two user accounts are
available, a primary and secondary. Each account is composed of three attributes:
username, password and access level. The username and password enable access to the
Embedded Web Server itself; the access level determines the extent of the access (that is,
availability of screens and read / write privileges). Note that additional accounts can be
defined using a RADIUS server (see SRTP).
Table 19 lists the available access levels and their privileges.
Available Access Levels and their Privileges
Table 19
Access Level
Security Administrator
Administrator
User Monitor
No Access
* The numeric representation of the access level is used only to define accounts in a RADIUS server (the
access level ranges from 1 to 255).
The access level mechanism operation is as follows (for both Web and RADIUS accounts):
Each Web screen features two (hard-coded) minimum access levels, read and write. The
read access level determines whether the screen can be viewed. The write access level
determines whether the information in the screen can be modified.
When a user tries to access a specific Web screen, his access level is compared with the
access levels of the screen:
If the access level of the user is less than the screen's read access level, the screen
cannot be viewed.
If the access level of the user is equal to or greater than the screen's read access level
but less than the write access level, the screen is read only.
If the access level of the user is equal to or greater than the screen's write access level,
the screen can be modified.
The default attributes for the two accounts are shown in
68
Numeric
Representation*
200
100
50
0
Privileges
Read / write privileges for all screens
Read-only privilege for security-related screens
and read / write privileges for the others
No access to security-related and file-loading
screens and read-only access to the others
No access to any screen
Table 20:
V7122 GatewayUser Guide