Coyote Point Systems Equalizer GX Series, Administration Manual

Page: 743 / 866

2. Enter and reenter a password of at least 6 characters to be used for logging in user “Touch_
1”.
eqcli >
user Touch_1
Enter desired user password:
******
Retype desired user password: ******
User “Touch_1” can now log in to Equalizer with these credentials.
3. Repeat steps 1 and 2, this time for a new user-”Touch_2”.
4. Set up permission for each new user with permissions for their individual clusters that were
previously configured on Equalizer. Enter the following:
eqcli > user Touch_1 permit_object read,write cluster Cl1
eqcli > user Touch_2 permit_object read,write cluster Cl2
5. Add “global read” privileges for each user so that they can view all of Equalizers objects and
object configurations within their designated clusters. Enter the following:
eqcli > user Touch_1 flags read_global
eqcli >
user Touch_2 flags read_global
The new users and their log in credentials have now been created. User “Touch_1” now has
“read” and “write” permissions for cluster “Cl1” and user “Touch_2” has “read” and “write”
permissions for cluster “Cl2”. The next step is to add specific permissions on the Equalizer
objects within each cluster for each user.
Object Permissions for Each User
Setup the object permissions for users “Touch_1” and “Touch_2”. Use
"Required Task Permissions and
Flags"
on page 736
"Required Task Permissions and Flags"
on page 736as a guideline.
1. Create “read” and “write” permissions for user “Touch_1” on VLAN “vl1”.
eqcli > user Touch_1 permit_object read,write vlan vl1
2. Create “read” and “write” permissions for user “Touch_2” on VLAN “vl2”.
eqcli > user Touch_2 permit_object read,write vlan vl2
3. Create “read”, “write” and “delete” permissions for user “Touch_1” on “testserverpool1”.
eqcli >
user Touch_1 permit_object read,write,delete srvpool testserverpool1
Copyright © 2014 Coyote Point Systems, A Subsidiary of Fortinet, Inc.
All Rights Reserved. 743
Equalizer Administration Guide