Administrator Guide

sysadmin Exec Config Interface Line Router IP Routemap Protocol
MAC
testadmin netadmin Exec Config Interface Line Router IP Routemap Protocol MAC
Displaying Role Permissions Assigned to a Command
To display permissions assigned to a command, use the show role command in EXEC Privilege mode. The output displays the
user role and or permission level.
Example of Role Permissions Assigned to a Command
DellEMC#show role mode ?
configure Global configuration mode
exec Exec Mode
interface Interface configuration mode
line Line Configuration mode
route-map Route map configuration mode
router Router configuration mode
DellEMC#show role mode configure username
Role access: sysadmin
DellEMC##show role mode configure password-attributes
Role access: secadmin,sysadmin
DellEMC#show role mode configure interface
Role access: netadmin, sysadmin
DellEMC#show role mode configure line
Role access: netadmin,sysadmin
Displaying Information About Users Logged into the Switch
To display information on all users logged into the switch, using the show users command in EXEC Privilege mode. The
output displays privilege level and/or user role. The mode is displayed at the start of the output and both the privilege and roles
for all users is also displayed. If the role is not defined, the system displays "unassigned" .
Example of Displaying Information About Users Logged into the Switch
DellEMC#show users
Authorization Mode: role or privilege
Line User Role Privilege Host(s) Location
0 console 0 admin sysadmin 15 idle
*3 vty 1 sec1 secadmin 14 idle 172.31.1.4
4 vty 2 ml1 netadmin 12 idle 172.31.1.5
Two Factor Authentication (2FA)
Two factor authentication also known as 2FA, strengthens the login security by providing one time password (OTP) in addition
to username and password. 2FA supports RADIUS authentications with Console, Telnet, and SSHv2.
To perform 2FA, follow these steps:
● When the Network access server (NAS) prompts for the username and password, provide the inputs.
● If the credentials are valid:
○ RADIUS server sends a request to the SMS–OTP daemon to generate an OTP for the user.
○ A challenge authentication is sent from the RADIUS server as Reply–Message attribute.
○ If the Reply–Message attribute is not sent from the RADIUS server, the default text is the Response.
○ 2FA is successful only on providing the correct OTP.
● If the credentials are invalid, the authentication fails.
742
Security