Cisco Systems 7000 Plumbing Product User Manual


 
2-81
Cisco SFS 7000 Series Product Family Command Reference Guide
OL-9163-02
Chapter 2 Administrative Commands
username
Usage Guidelines Platform Availability:
Cisco SFS 3001, Cisco SFS 7000, Cisco SFS 7008, Cisco SFS 3012, Cisco 4x InfiniBand Switch Module
for IBM BladeCenter
Privilege Level:
Unrestricted read-write user or general read-write user (change own password only).
The
username
command
Creates and remove user accounts. The default CLI user accounts are guest, admin, and super.
Changes user password. A user with read-write access may change their own password.
Assigns access levels based upon functional areas, such as Fibre Channel, Ethernet, and InfiniBand
administrative areas. Access levels may be unrestricted or read-only or read-write for the various
administrative areas. Unrestricted indicates super user.
Enables or disables the account.
Associates user accounts with SNMP community strings. This community string serves as the
password for Element Manager access.
You must create the user account with the
password
keyword before you can configure the account. By
default, the Server Switch provides the unrestricted user login super (that uses a default password of
super). This login uses secret as its default SNMP community string. SNMP community strings provide
the user credentials necessary to access Management Information Base (MIB) object.
Each user login uses one unique community string and one password. A login must use a community
string to launch an Element Manager session. To restrict a deny a user access to SNMP, do not provide
the login with a community string.
Note SNMP community strings are sent across the network in UDP packets with no encryption.
By default, new user accounts have read-only access. You may grant write privileges to a user for
functional areas, such as InfiniBand, Ethernet, and Fibre Channel. Privileges are order-dependent. You
must enter multiple access privileges in the following order:
1. ib-ro
2. ib-rw
3. ip-ethernet-ro
4. ip-ethernet-rw
5. fc-ro
6. fc-rw
7. unrestricted-rw
When changing the privileges of an existing user, specify all the privileges allowed to the user (including
re-entering existing privileges) because the privilege argument removes all existing privileges and
replaces them with them with the new ones.