Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 260

User Accounts Management The CLI provides configuration of authentication for switch administrators or network users either through remote authentication servers supporting TACACS+ or RADIUS or through a set of locally managed user accounts. The setup wizard asks the user to create the initial administrator account and password at the time the system is booted. The following rules and specifications apply: • The administrator may create additional administrator accounts. • User accounts have an associated privilege level, a user name, and a user password. • The administrator is able to delete the administrator accounts. • The password is saved internally in encrypted format and never appears in clear text anywhere on the CLI. • The CLI supports TACACS+ and RADIUS authentication servers and RADIUS accounting servers. • The CLI allows the administrator to configure primary and secondary authentication servers. If the primary authentication server fails to respond within a configurable period, the CLI automatically tries the secondary authentication server. • The administrator can specify whether the CLI should revert to using local accounts when the remote authentication servers do not respond or if the CLI simply fails the login attempt because the authentication servers are down. This capability applies only when the administrator is logged in through a telnet or an SSH session. • The CLI always allows the administrator to log in to a local serial port even if the remote authentication server(s) are down. In this case, CLI reverts to using the locally configured accounts to allow the administrator to log in. User Access Control In addition to authenticating an administrator, the CLI also assigns the administrator access to one of two security levels. Privilege level 1 has readonly access. This level allows the administrator to read information but not configure the switch. The access to this level cannot be modified. Level 15 is the special access level assigned to the superuser of the switch. This level has full access to all functions within the switch. Using the CLI 260