Security planning
PTP 450 Configuration and User
pmp-0815 (August 2015)
4-39
From the factory default state, configure passwords for both the
root
and
admin
account
at the ADMINISTRATOR permission level, using the
Account => Change Users
Password
tab. (If you configure only one of these, then the other does not required a
password for access into it and thus remains a security risk.) If you are intent on
configuring only one of them, delete the
admin
account. The
root
account is the only
account that CNUT uses to update the module.
After a password has been set for any ADMINISTRATOR level account, initial access to the
module GUI opens the view of GUEST level.
The
User Mode
is used to create an account which are mainly used for viewing the
configurations. The local and remote Read-Only user account can be created by “Admin”,
“Installer” or “Tech” logins. To create a Read-Only user, the “read-only” check box needs
to be checked.
The Read-Only user cannot perform any service impacting operations like creating read-
only accounts, editing and viewing read-only user accounts, changes in login page, read-
only user login, Telnet access, SNMP, RADIUS and upgrade/downgrade.
Figure 47
BHM/BHS Add User tab of account page
After a password has been set for any ADMINISTRATOR-level account, initial access to the
module GUI opens the view of GUEST level.
Deleting a User from Access to a Module
The
Account
=>
Delete User
tab provides a drop down list of configured users from
which to select the user you want to delete.
Figure 48
Delete User tab of the BHM/BHS
Accounts that cannot be deleted are
the current user's own account.
the last remaining account of ADMINISTRATOR level.
