LevelOne GEP-5070 Manual - Page 60

CHAPTER 4 | Configuring the Switch Configuring Security CONFIGURING USER Use the Privilege Levels page to set the privilege level required to read or PRIVILEGE LEVELS configure specific software modules or system settings. PATH Advanced Configuration, Security, Switch, Privilege Levels PARAMETERS These parameters are displayed: ◆ Group Name - The name identifying a privilege group. In most cases, a privilege group consists of a single module (e.g., LACP, RSTP or QoS), but a few groups contains more than one module. The following describes the groups which contain multiple modules or access to various system settings: ■ System: Contact, Name, Location, Timezone, Log. ■ Security: Authentication, System Access Management, Port (contains Dot1x port, MAC based and the MAC Address Limit), ACL, HTTPS, SSH, ARP Inspection, and IP source guard. ■ IP: Everything except for ping. ■ Port: Everything except for VeriPHY. ■ Diagnostics: ping and VeriPHY. ■ Maintenance: CLI - System Reboot, System Restore Default, System Password, Configuration Save, Configuration Load and Firmware Load. Web - Users, Privilege Levels and everything in Maintenance. ■ Debug: Only present in CLI. ◆ Privilege levels - Every privilege level group can be configured to access the following modules or system settings: Configuration Readonly, Configuration/Execute Read-write, Status/Statistics Read-only, and Status/Statistics Read-write (e.g., clearing statistics). The default settings provide four access levels: ■ 1 - Read access of port status and statistics. ■ 5 - Read access of all system functions except for maintenance and debugging ■ 10 - read and write access of all system functions except for maintenance and debugging ■ 15 - read and write access of all system functions including maintenance and debugging. WEB INTERFACE To configure privilege levels: 1. Click Advanced Configuration, Security, Switch, Privilege Levels. 2. Set the required privilege level for any software module or functional group. - 60 -