ADTRAN TOTAL ACCESS 600R, System Manual

Page: 49 / 196

Total Access 600R System Manual Section 4 User Interface Guide
61200600L1-1A © 2002 ADTRAN, Inc. 49
Table 3. Telnet Security Levels
S
YSTEM
C
ONFIG
> M
ANAGEMENT
> T
ELNET
A
CCESS
> IP A
CCESS
L
IST
Set up the list of allowed Telnet managers.
Security
Level
Description
Full The user has all access to view and configure all menus (same as logging in to
the
CRAFT port)
Support The user has read-only access to view the S
YSTEM
I
NFO
menu. The user has
privileges to view and change everything under the S
YSTEM
C
ONFIG
menu
except for the CRAFT port settings, Telnet access lists, and SNMP
management communities. The user has full access to the S
YSTEM
U
TILITY
menu, including the ability to upgrade firmware and reset the unit. The user has
full access to the
I
NTERFACES
, L2 P
ROTOCOL
, B
RIDGE
, R
OUTER
, and DS0 menus.
The user does not have the ability to set R
ADIUS SERVER
settings under the
S
ECURITY
menu.
Config The same privileges as support, except that the user does not have privileges to
download firmware or configuration from the
S
YSTEM
U
TILITY
menu. The user
additionally does not have the privilege to reset the unit remotely, or enter the
terminal menu.
Router The user has read-only privileges for the S
YSTEM
I
NFO
menu. There is no access
to the S
YSTEM
C
ONFIG
menu. The user has P
ING
and T
RACEROUTE
access from
the S
YSTEM
U
TILITY
menu. The user is limited to Ethernet configuration and
status from the I
NTERFACES
menu. The user has full access to the B
RIDGE
and
R
OUTER
menus. Access is limited to filters only from the S
ECURITY
menu.
Status The user has read access of all menus except for the following: S
YSTEM
C
ONFIG
/CRAFT P
ORT
, S
YSTEM
C
ONFIG
/T
ELNET
A
CCESS
, S
YSTEM
C
ONFIG
/SNMP
M
ANAGEMENT
, and S
ECURITY
/ R
ADIUS
S
ERVER
. The user does not have access
to U
PGRADE
F
IRMWARE
, U
PGRADE
C
ONFIG
, P
ING
, or T
RACEROUTE
menus. The
user cannot reset the unit or enter terminal mode.
N
ETWORK
A
DDRESS AND
M
ASK
Enter a network address and subnet mask from which Telnet access to the unit is allowed. When a
remote unit requests Telnet access to the unit, if the access list is empty or the remote’s IP address
matches a list entry, remote access is granted. A subnet mask of 0.0.0.0 will allow any host Telnet
access, regardless of the network address. A network address of 0.0.0.0 with corresponding netmask
255.255.255.255 will not allow any host Telnet access.
The factory default is
0.0.0.0.
for both parameters, which will allow all users Telnet IP access.