Cisco SFS7000P-SK9 Command Reference - Page 111

Chapter 2 Administrative Commands username Usage Guidelines Platform Availability: Cisco SFS 3001, Cisco SFS 7000, Cisco SFS 7008, Cisco SFS 3012, Cisco 4x InfiniBand Switch Module for IBM BladeCenter Privilege Level: Unrestricted read-write user or general read-write user (change own password only). The username command • Creates and remove user accounts. The default CLI user accounts are guest, admin, and super. • Changes user password. A user with read-write access may change their own password. • Assigns access levels based upon functional areas, such as Fibre Channel, Ethernet, and InfiniBand administrative areas. Access levels may be unrestricted or read-only or read-write for the various administrative areas. Unrestricted indicates super user. • Enables or disables the account. • Associates user accounts with SNMP community strings. This community string serves as the password for Element Manager access. You must create the user account with the password keyword before you can configure the account. By default, the Server Switch provides the unrestricted user login super (that uses a default password of super). This login uses secret as its default SNMP community string. SNMP community strings provide the user credentials necessary to access Management Information Base (MIB) object. Each user login uses one unique community string and one password. A login must use a community string to launch an Element Manager session. To restrict a deny a user access to SNMP, do not provide the login with a community string. Note SNMP community strings are sent across the network in UDP packets with no encryption. By default, new user accounts have read-only access. You may grant write privileges to a user for functional areas, such as InfiniBand, Ethernet, and Fibre Channel. Privileges are order-dependent. You must enter multiple access privileges in the following order: 1. ib-ro 2. ib-rw 3. ip-ethernet-ro 4. ip-ethernet-rw 5. fc-ro 6. fc-rw 7. unrestricted-rw When changing the privileges of an existing user, specify all the privileges allowed to the user (including re-entering existing privileges) because the privilege argument removes all existing privileges and replaces them with them with the new ones. OL-9163-02 Cisco SFS 7000 Series Product Family Command Reference Guide 2-81