Extreme Networks ExtremeWare Enterprise Manager, Installation And User Manual

Page: 62 / 264

4-2 E
XTREME
W
ARE
E
NTERPRISE
M
ANAGER
I
NSTALLATION AND
U
SER
G
UIDE
A
DMINISTERING THE
E
XTREME
W
ARE
E
NTERPRISE
M
ANAGER
• Administrator—users who can create, modify and delete user accounts as well as
perform all the functions of a user with Manager access.
The Enterprise Manager provides two default users, “admin” with Administrator
access, and “user” with Monitor access. The two default users do not initially have
passwords. All other user names must be added and enabled by an Administrator user.
Regardless of your access level, you can run the Administration applet and change your
own password. Users with Administrator access can add and delete users and assign
user access levels.
Note: The ExtremeWare Enterprise Manager user accounts are separate from the
Extreme switch user accounts. You can configure both through the Enterprise
Manager, or you can have switch access independently of the Enterprise
Manager.
E
XTREME
W
ARE
A
CCESS
Through the Enterprise Manager, two levels of access to Extreme switches can be
enabled:
• User—users who can view device status information and statistics, but cannot
modify any parameters.
• Administrator—users who can modify device parameters as well as view status
information and statistics.
These permissions enable access to Extreme Networks switches through Telnet or
ExtremeWare Vista. The use of the RADIUS server avoids the need to maintain user
names, passwords, and access permissions in each switch, and instead centralizes the
configuration in one location in the ExtremeWare Enterprise Manager.
T
HE
RADIUS S
ERVER
ExtremeWare Enterprise Manager incorporates a basic RADIUS server for user
authentication. RADIUS provides a standard way for the Enterprise Manager and
Extreme switches to handle user authentication, permitting the unification of the
Extreme CLI, ExtremeWare Vista, and Enterprise Manager authentication.
ExtremeWare versions 4.1 and later support the RADIUS server for authentication and
can act as RADIUS clients.