Cisco Systems MGX 8220 Switch User Manual


 
3-7
Cisco MGX 8220 Installation and Configuration
Release 5.0, Part Number 78-6430-03 Rev. D0, November 2003
Chapter
User Accounts and Privilege Levels
User Accounts and Privilege Levels
The Cisco MGX 8220 includes built-in security features to prevent unauthorized use of the system. The
security features require that each user on the system have a valid account (specified by a userID),
password, and privilege level.
The combination of account, password, and privilege level determines which commands the user can
enter.
The account (userID) and privilege level are assigned using the adduser command. There is a default
password which is used the first time a user logs in. When logged in, the user can change the password
to a personal password with the cnfpwd configure password command.
This section describes the following topics:
Accounts, page 3-7
Privilege Levels, page 3-7
Passwords, page 3-7
Accounts
Each user is assigned an account (userID), which is specified as a parameter in the adduser command.
The userID consists of up to 12-alphanumeric characters including letters, numbers, a hyphen, and an
underscore. UserIDs are case sensitive.
When a user attempts to log in, the system prompts for a valid userID.
The Cisco MGX 8220 shelf permits one supervisor account and 63 user accounts. The Cisco MGX 8220
shelf ships with a preconfigured superuser account.
Privilege Levels
Each account is assigned a privilege level when the account is established with the adduser command.
Only an established user can enter the adduser command to open a new account. The account you
create can only have a privilege level at the same or lower level than your own privilege level.
All commands have an assigned privilege level. A command can only be enter by a user whose privilege
level is equal to or above the privilege level of the command. There is one superuser privilege level and
six user levels designated 1 to 6 (with 1 being the highest).
Passwords
A default password is used the first time users log in. When users are logged on, they can change the
password entering the cnfpwd command.
The password must consist of 6 to 15 characters. Only letters, numbers, a hyphen, an underscore, and
spaces are allowed. The password is case sensitive. For security, the password is not displayed as it is
entered.
When a user attempts to log in, the system prompts for a valid password after the userID prompt has
been entered. The user must respond with the accounts valid password.