PDF user manual for CopperEdge 150

Management by a Radius ServerIf your system will be managed by an external Radius server,you will not create the SNMP Community names from Copper-Craft. The user and password databases on all CE150s on thenetwork, including CopperView (SNMP) sessions, will be consolidatedon the Radius server. All login requests for CE150swill go to the Radius server for verificationOnce the Radius server is provisioned and enabled, securityfeatures are under its control. All operators will be created onthe Radius server instead of through CopperCraft; you can stillconfigure the CopperCraft cmOperatorTable, but its contentswill no longer be used. Operators configured in the cmOperatorTableand not contained in the Radius server database willnot be able to log in. The Radius protocol requires that operatornames and passwords are fully case-sensitive.Create a Unique OperatorCreate at least one unique operator name and password withthe CLI using the Craft port, Telnet, or the modem; you cannotuse SNMP or HTTP. We recommend you use this operator toperform the remaining configuration tasks.To create a new operator:1. From the control console, enter the name, password,state, context of nonSNMP, and privilege level ofProvision.CRAFT> set cmoperator [mick] password=stonesstate=create context=nonsnmp privilege=provisionSet Successful2. Verify the new operator configuration:CRAFT> get cmoperator [mick]Group: cmOperatorInstance: [Mick]Name= MickPassword = *******State= activeContext= nonSNMPPrivilege= ProvisionPasswords are not displayed. If a user forgets apassword, the Security Administrator can change it toanother one, or else delete the operator and start again.3. Test the new operator by logging out of the Craftsession and logging in with the new username andpassword.&RSSHU(GJH,QVWDOODWLRQDQG2SHUDWLQJ*XLGH