3Com V6100, User Manual Manual, Page: 82 / 496

82
V6100 and V7122 User Guide
User Accounts
To prevent unauthorized access to the Embedded Web Server, two user accounts are
available, a primary and secondary. Each account is composed of three attributes:
username, password and access level. The username and password enable access to the
Embedded Web Server itself; the access level determines the extent of the access (i.e.,
availability of screens and read / write privileges). Note that additional accounts can be
defined using a RADIUS server (see
SRTP ).
Table 27 lists the available access levels and their privileges.
Table 27
Available Access Levels and their Privileges
Access Level
Numeric
Representation
*
Privileges
Security Administrator 200 Read / write privileges for all screens
Administrator 100
Read-only privilege for security-related screens
and read / write privileges for the others
User Monitor 50
No access to security-related and file-loading
screens and read-only access to the others
No Access 0 No access to any screen
* The numeric representation of the access level is used only to define accounts in a RADIUS server (the
access level ranges from 1 to 255).
The access level mechanism operation is as follows (for both Web and RADIUS accounts):
Each Web screen features two (hard-coded) minimum access levels, read and write. The
read access level determines whether the screen can be viewed. The write access level
determines whether the information in the screen can be modified.
When a user tries to access a specific Web screen, his access level is compared with the
access levels of the screen:
ƒ
If the access level of the user is less than the screen’s read access level, the screen
cannot be viewed.
ƒ
If the access level of the user is equal to or greater than the screen’s read access level
but less than the write access level, the screen is read only.
ƒ
If the access level of the user is equal to or greater than the screen’s write access level,
the screen can be modified.
The default attributes for the two accounts are shown in Table 28 :