Administrator Guide

secadmin Exec Config
sysadmin Exec Config Interface Line Router IP Routemap Protocol
MAC
testadmin netadmin Exec Config Interface Line Router IP Routemap Protocol MAC
Displaying Role Permissions Assigned to a Command
To display permissions assigned to a command, use the show role command in EXEC Privilege mode. The output displays the user role
and or permission level.
Examples of Role Permissions Assigned to a Command
Dell#show role mode ?
configure Global configuration mode
exec Exec Mode
interface Interface configuration mode
line Line Configuration mode
route-map Route map configuration mode
router Router configuration mode
Dell#show role mode configure username
Role access: sysadmin
Dell##show role mode configure password-attributes
Role access: secadmin,sysadmin
Dell#show role mode configure interface
Role access: netadmin, sysadmin
Dell#show role mode configure line
Role access: netadmin,sysadmin
Displaying Information About Users Logged into the Switch
To display information on all users logged into the switch, using the show users command in EXEC Privilege mode. The output displays
privilege level and/or user role. The mode is displayed at the start of the output and both the privilege and roles for all users is also
displayed. If the role is not defined, the system displays "unassigned" .
Example of Displaying Information About Users Logged into the Switch
Dell#show users
Authorization Mode: role or privilege
Line User Role Privilege Host(s) Location
0 console 0 admin sysadmin 15 idle
*3 vty 1 sec1 secadmin 14 idle 172.31.1.4
4 vty 2 ml1 netadmin 12 idle 172.31.1.5
Two Factor Authentication (2FA)
Two factor authentication also known as 2FA, strengthens the login security by providing one time password (OTP) in addition to
username and password. 2FA supports RADIUS authentications with Console, Telnet, and SSHv2.
To perform 2FA, follow these steps:
• When the Network access server (NAS) prompts for the username and password, provide the inputs.
• If the credentials are valid:
• RADIUS server sends a request to the SMS–OTP daemon to generate an OTP for the user.
• A challenge authentication is sent from the RADIUS server as Reply–Message attribute.
• If the Reply–Message attribute is not sent from the RADIUS server, the default text is the Response.
• 2FA is successful only on providing the correct OTP.
830
Security