For example, to configure a new RSAv1 public hostkey, you could use the following
command:
(config) # ssh server host-key rsa1 public-key generate
Initial User Account Configuration
Before you start mapping traffic, you must change the password for the
admin
account
and add a few other accounts for use by different level users. (You may have already used
the jump-start script to change the password for the
admin
account.)
Changing the admin Account Password
1. To change the password for the
admin
account using the
username
command,
refer to the following:
(config) # username admin password <password>
Passwords must meet the following standards:
o
Include 8-30 characters.
o
Include at least one numeral
o
Include at least one capital letter
o
Include at least one special character (for example,
!
,
@
,
#
,
$
,
%
,
^
,
&
, or
*
– ASCII
[0x21, 0x2F], [0x3A, 0x40], [0x5B, 0x5F], [0x7B,0x7E]).
Enter a new password that meets the standards and confirm the password.
Setting Up Some Basic Accounts
1. The TA Series node has a local account database that can optionally integrate with
an LDAP, RADIUS, or server for authentication. Any account you want to
authenticate using an external AAA server must have a matching account name in
the local database.
Authentication, user levels, and roles are discussed in detail in the
GigaVUE-OS CLI
Reference Guide
. For now, however, it is easiest to simply create a few basic user
accounts with different privilege levels. In general, user privileges are as follows:
o
Admin users have access to all command modes, including Standard, Enable,
and Configure. They also have full permissions for all network, tool, and stack
ports.
o
Operator users have access to all command modes, including Standard, Enable,
and Configure. However, they only have access to the network and tool ports
associated with their user group. New users are created with the operator role by
default. You can add additional roles with the
username <username> roles add
<roles>
command.
o
Monitor users have access to the Standard and Enable command modes. They
cannot configure packet distribution (or any other global GigaVUE TA Series
TA Series node options), but they can use the show command to review many of
the settings in place on the node.
The following username commands create a new admin user and a new operator user:
Contents
35
GigaVUE-TA25E Hardware Installation Guide
