Bridge GUI Guide: Administrative Access
33
Console
- The account can access the Bridge CLI through a
direct, physical connection to the Bridge’s
Console
port
(refer to the
CLI Software Guide
).
Web
- The account can access the Bridge GUI through a
browser connected to the Bridge’s IP address (refer to
Section 2.1.3).
NOTE:
SSH must
be enabled on the
Bridge before an admin-
istrative account config-
ured for SSH access can
log on to the Bridge CLI
remotely (refer to Sec-
tion 4.1.6 and/or the
CLI
Software Guide
).
SSH
- The account can access the Bridge CLI through a
Secure Shell terminal session (refer to the
CLI Software
Guide
).
Interfaces are independently selectable in any combination. By
default, all three are selected so that accounts can use any of
them to access the Bridge. Clearing an option’s checkbox will
deselect it, preventing access through the deselected interface
for that account. Clearing all three
Interface Permissions
checkboxes effectively disables the account.
You can create new administrative accounts only in Advanced
View, but you can change interface permissions for the three
preconfigured accounts in Simple View.
2.2.2.7
Administrator Passwords and Password Controls
NOTE:
Default
passwords for pre-
configured accounts are
the same as their user
names (
admin
,
mainte-
nance
,
logviewer
) and
should be changed
when the Bridge is in-
stalled.
You must configure a password for an administrative account
at the time the account is created.
Passwords must conform to the rules in effect on the Bridge as
configured in
Security
settings (refer to Section 2.2.1.8)
You can also view current password complexity requirements
by clicking
More Information
in the upper right of the
Edit Admin
Users
screen and then
Password Complexity Settings
.
An administrative account with a
Learned
state of
Yes
acquires
the password configured for the associated administrator in the
external RADIUS server (refer to Section 2.2.2.8). This
password need not conform to locally configured rules.
You can create and edit administrative accounts only in
Advanced View, but, as long as you are logged on to an
Administrator
-level account, you can enable/disable the three
preconfigured accounts in Simple View and change their
passwords and interface permissions. (Refer to Section
2.2.2.11 for information on changing passwords from lower
level administrator accounts.)
Locking Passwords
NOTE:
Configur-
ing an administra-
tive account’s
Role
is
By default, passwords are not locked, allowing administrators
with
Maintenance
and
Log Viewer
accounts to change their own
passwords (refer to Section 2.2.2.11). When
Yes
is selected for
Password is Locked
, passwords cannot be changed. If an
administrator attempts to change a locked password, the
Edit
Password
screen will be returned with the error message:
Password is locked against any changes
.
