© Copyright IBM Corp. 2011
Chapter 1. Switch Administration
33
Switch Login Levels
To enable better switch management and user accountability, three levels or
classes
of user access have been implemented on the G8000. Levels of access to CLI, Web
management functions, and screens increase as needed to perform various switch
management tasks. Conceptually, access classes are defined as follows:
•
User interaction with the switch is completely passive—nothing can be changed
on the G8000. Users may display information that has no security or privacy
implications, such as switch statistics and current operational state information.
•
Operators can only effect temporary changes on the G8000. These changes will
be lost when the switch is rebooted/reset. Operators have access to the switch
management features used for daily switch operations. Because any changes an
operator makes are undone by a reset of the switch, operators cannot severely
impact switch operation.
•
Administrators are the only ones that may make permanent changes to the
switch configuration—changes that are persistent across a reboot/reset of the
switch. Administrators can access switch functions to configure and troubleshoot
problems on the G8000. Because administrators can also make temporary
(operator-level) changes as well, they must be aware of the interactions between
temporary and permanent changes.
Access to switch functions is controlled through the use of unique surnames and
passwords. Once you are connected to the switch via local Telnet, remote Telnet, or
SSH, you are prompted to enter a password. The default user names/password for
each access level are listed in the following table.
Note:
It is recommended that you change default switch passwords after initial
configuration and as regularly as required under your network security
policies.
Note:
With the exception of the “admin” user, access to each user level can be
disabled by setting the password to an empty value.
Table 2. User Access Levels
User Account
Password
Description and Tasks Performed
user
user
The User has no direct responsibility for switch
management. He or she can view all switch status
information and statistics, but cannot make any
configuration changes to the switch.
oper
oper
The Operator manages all functions of the switch.
The Operator can reset ports, except the
management ports.
admin
admin
The superuser Administrator has complete access to
all menus, information, and configuration commands
on the G8000, including the ability to change both the
user and administrator passwords.
Summary of Contents for RackSwitch G8000
Page 1: ...RackSwitch G8000 Application Guide...
Page 2: ......
Page 3: ...RackSwitch G8000 Application Guide...
Page 16: ...16 RackSwitch G8000 Application Guide...
Page 22: ...20 RackSwitch G8000 Application Guide...
Page 23: ...Copyright IBM Corp 2011 21 Part 1 Getting Started...
Page 24: ...22 RackSwitch G8000 Application Guide...
Page 54: ...52 RackSwitch G8000 Application Guide...
Page 55: ...Copyright IBM Corp 2011 53 Part 2 Securing the Switch...
Page 56: ...54 RackSwitch G8000 Application Guide...
Page 92: ...90 RackSwitch G8000 Application Guide...
Page 94: ...92 RackSwitch G8000 Application Guide...
Page 144: ...142 RackSwitch G8000 Application Guide...
Page 145: ...Copyright IBM Corp 2011 143 Part 4 Advanced Switch ing Features...
Page 146: ...144 RackSwitch G8000 Application Guide...
Page 148: ...146 RackSwitch G8000 Application Guide...
Page 182: ...180 RackSwitch G8000 Application Guide...
Page 184: ...182 RackSwitch G8000 Application Guide...
Page 212: ...210 RackSwitch G8000 Application Guide...
Page 258: ...256 RackSwitch G8000 Application Guide...
Page 286: ...284 RackSwitch G8000 Application Guide...
Page 294: ...292 RackSwitch G8000 Application Guide...
Page 298: ...296 RackSwitch G8000 Application Guide...
Page 310: ...308 RackSwitch G8000 Application Guide...
Page 311: ...Copyright IBM Corp 2011 309 Part 7 Network Management...
Page 312: ...310 RackSwitch G8000 Application Guide...
Page 320: ...318 RackSwitch G8000 Application Guide...
Page 332: ...330 RackSwitch G8000 Application Guide...
Page 334: ...332 RackSwitch G8000 Application Guide...
Page 345: ...Copyright IBM Corp 2011 343 Part 9 Appendices...
Page 346: ...344 RackSwitch G8000 Application Guide...
Page 357: ...Copyright IBM Corp 2011 Appendix C Notices 355 Taiwan Class A compliance statement...