Dell PowerConnect 5548 User Guide - Page 71

Security Management and Password Configuration System security is handled through the Authentication, Authorization, and Accounting (AAA) mechanism that manages user access rights, privileges, and management methods. AAA uses both local and remote user databases. Data encryption is handled through the SSH mechanism. Passwords can be configured for the following services: • Terminal • Telnet • SSH • HTTP • HTTPS NOTE: When creating a user name, the default priority is 1, which provides access but not configuration rights. A priority of 15 must be set to enable access and configuration rights to the device. Although user names can be assigned privilege level 15 without a password, it is recommended to always assign a password. If there is no specified password, privileged users can access the Web interface with any password. NOTE: Passwords can be secured by using password management commands to force aging out of passwords, or expiration of passwords. For more information, see "Management Security" on page 254. Initial Configuration and Password Recovery The system is delivered without a default password, and all passwords must be defined by the user. If a user-defined password is lost, a password recovery procedure can be invoked from the Startup menu. This procedure is applicable for the local terminal only and enables a single access to the device from the local terminal with no password entered. The full mode of password recovery mechanism can be enabled/disabled through the CLI (service password-recovery command). This affects password recovery in the following way: • Enabled: When the password-recovery mechanism is invoked, one-time access to the device without a password is enabled and all configuration and user files are retained. Dell PowerConnect 55xx Systems User Guide 71