Comtech EF Data CDM-425, Инструкция по установке и эксплуатации

Страница: 735 / 744

CDM-425 Advanced Satellite Modem
Revision 0
Appendix O O–5 MN-CDM-425
User Access Login Level Access Restriction(s)
Admin User (system*) Full read/write access to all remote commands and queries via Telnet, Telnet CLI
(when unit is equipped with the Optional IP Packet Processor), and web pages
(including RADIUS configuration and control using the Admin | Access web page),
Read/Write User No Access to Admin- or IP Packet Processor-related Telnet remote commands and
queries, Telnet CLI, and web pages.
Full read/write access to all modem configuration and monitoring web pages (except
Admin).
Read-Only User No Access to Admin or IP Packet Processor-related web pages, Telnet remote
commands and queries, or Telnet CLI.
Read Only Access for all other web pages.
•
RADIUS does not control user access to the CDM-425 Advanced Satellite
Modem front panel, serial-based remote product management, or the SNMP
user interface.
*System administration under the Admin User login privilege does not require
RADIUS.
•
Admin User credentials are stored in the modem, so login as Admin User does
not require the RADIUS Server connectivity.
•
SNMP access can be disabled using System Admin access.
Configuration of RADIUS features is possible only through the HTTP (Web Server) Interface
Admin | Access page, or by issuance of remote commands via Telnet. No configuration of
RADIUS is available from the CDM-425 Advanced Satellite Modem front panel or through serial-
based remote commands, SNMP, or the Telnet CLI.
The modem is configurable with primary and secondary RADIUS server addresses. In the event
that the primary server is unavailable, the secondary server will be used to validate the user
name and password.
Read/write and read-only user credentials are managed via the RADIUS Client Server – the
RADIUS Client Server cannot grant Admin level access. The modem locally stores one Admin-
level user name and password. If the RADIUS client is disabled or the modem cannot access the
primary and the secondary server, any user trying to access the modem will be authenticated with
the locally stored username and password, which provides full Admin access.
•
All user credentials are verified by the RADIUS server, when the client has
connectivity to either the primary or secondary RADIUS servers.
•
In the absence of primary or secondary RADIUS server connectivity, or when
RADIUS is disabled, the locally stored Admin credentials are used for modem
access.