BLADE OS™ Application Guide HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Version 5.1 Advanced Functionality Software

BLADE OS 5.1 Application Guide
60  Chapter 1: Accessing the Switch BMD00113, September 2009
End User Access Control
BLADE OS allows an administrator to define end user accounts that permit end users to perform
operation tasks via the switch CLI commands. Once end user accounts are configured and enabled,
the switch requires username/password authentication.
The user types listed in Table 6 can be assigned to individual users:
For example, an administrator can assign an end user login as an operator, who can then log into the
switch and perform operational commands (effective only until the next switch reboot).
Considerations for Configuring End User Accounts
 A maximum of 10 user IDs are supported on the switch.
 BLADE OS supports end user support for Console, Telnet, BBI, and SSHv1/v2 access to the
switch.
 If RADIUS authentication is used, the user password on the Radius server will override the
user password on the GbE2c. Also note that the password change command on the switch only
modifies the use switch password and has no effect on the user password on the Radius server.
Radius authentication and user password cannot be used concurrently to access the switch.
 Passwords can be up to 128 characters in length for TACACS, RADIUS, Telnet, SSH,
Console, and Web access.
Table 6 User Access Levels
User Type Description and Tasks Performed
User The User has no direct responsibility for switch management. He or she can view
all switch status information and statistics but cannot make any configuration
changes to the switch.
Operator The Operator manages all functions of the switch. The Operator can reset ports or
the entire switch.
Administrator The super-user Administrator has complete access to all menus, information, and
configuration commands on the switch, including the ability to change both the
user and administrator passwords.