OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Overview of User Accounts
Managing Switch User Accounts
Overview of User Accounts
A user account includes a login name, password, and user privileges. These privileges determine whether
the user has read or write access to the switch and which command domains and command families the
user is authorized to execute on the switch.
The designation of particular command families/domains or command families for user access is sometimes
referred to as partitioned management. The privileges and profiles are sometimes referred to as
authorization.
Note. For information about setting up user information on an authentication (AAA) server, see the
“Managing Authentication Servers” chapter of the OmniSwitch AOS Release 8 Network Configuration
Guide.
Users typically log into the switch through one of the following methods:
• Console port—A direct connection to the switch through the console port.
• Telnet—Any standard Telnet client may be used for logging into the switch.
• FTP—Any standard FTP client may be used for logging into the switch.
• HTTP—The switch has a Web browser management interface for users logging in via HTTP. This
management tool is called WebView.
• Secure Shell—Any standard Secure Shell client may be used for logging into the switch.
• SNMP—Any standard SNMP browser may be used for logging into the switch.
Startup Defaults
By default, a single user management account is available at the first bootup of the switch. This account
has the following user name and password:
• user name—admin
• password—switch
Initially, the admin user can only be authorized on the switch through the console port. Management
access through any other interface is disabled. The Authenticated Switch Access commands may be used
to enable access through other interfaces/services (Telnet, HTTP, etc.); however, SNMP access is not
allowed for the admin user. Also, the admin user cannot be modified, except for the password.
Password expiration for the admin user is disabled by default. See “Configuring Password Expiration” on
page 6-11.
In addition, another account, default, is available on the switch for default settings only; this account
cannot be used to log into the switch. It is used to store and modify default settings for new users.
To set up a user account, use the user command, which specifies the following:
• Password—The password is required for new users or when modifying a user’s SNMP access. The
password will not appear in an ASCII configuration file created via the snapshot command.
page 6-4 OmniSwitch AOS Release 8 Switch Management Guide May 2014