User manual

C HAPTER 4 | Configuring the Switch
Configuring Security
– 58 –
addresses assigned to DHCP clients can also be carefully controlled using
static or dynamic bindings with DHCP Snooping and IP Source Guard
commands. ARP Inspection can also be used to validate the MAC address
bindings for ARP packets, providing protection against ARP traffic with
invalid MAC to IP address bindings, which forms the basis for “man-in-the-
middle” attacks.
CONFIGURING USER
ACCOUNTS
Use the User Configuration page to control management access to the
switch based on manually configured user names and passwords.
PATH
Advanced Configuration, Security, Switch, Users
COMMAND USAGE
◆ The default guest name is “guest” with the password “guest.” The
default administrator name is “admin” with the password “admin.”
◆ The guest only has read access for most configuration parameters.
However, the administrator has write access for all parameters
governing the onboard agent. You should therefore assign a new
administrator password as soon as possible, and store it in a safe place.
◆ The administrator has a privilege level of 15, with access to all process
groups and full control over the device. If the privilege level is set to
any other value, the system will refer to each group privilege level. The
user's privilege should be same or greater than the group privilege
level to have the access of a group. By default, most of the group
privilege levels are set to 5 which provides read-only access and
privilege level 10 which also provides read/write access. To perform
system maintenance (software upload, factory defaults, etc.) the user’s
privilege level should be set to 15. Generally, the privilege level 15 can
be used for an administrator account, privilege level 10 for a standard
user account, and privilege level 5 for a guest account.
PARAMETERS
These parameters are displayed:
◆ User Name – The name of the user.
(Maximum length: 8 characters; maximum number of users: 16)
◆ Password – Specifies the user password.
(Range: 0-8 characters plain text, case sensitive)
◆ Password (again) – Re-type the string entered in the previous field to
ensure no errors were made. The switch will not change the password if
these two fields do not match.