Brocade Communications Systems 53-1001763-02 사용자 설명서
88
Fabric OS Administrator’s Guide
53-1001763-02
Local database user accounts
5
Local database user accounts
User add, change, and delete operations are subject to the subset rule: an admin with ADlist 0-10
or LFlist 1-10 cannot perform operations on an admin, user, or any role with an ADlist 11-25 or
LFlist 11-128. The user account being changed must have an ADlist or LFlist that is a subset of the
account that is making the change.
or LFlist 1-10 cannot perform operations on an admin, user, or any role with an ADlist 11-25 or
LFlist 11-128. The user account being changed must have an ADlist or LFlist that is a subset of the
account that is making the change.
In addition to the default administrative and user accounts, Fabric OS supports up to 252
user-defined accounts in each logical switch (domain). These accounts expand your ability to track
account access and audit administrative activities.
user-defined accounts in each logical switch (domain). These accounts expand your ability to track
account access and audit administrative activities.
Default accounts
lists the predefined accounts offered by Fabric OS available in the local switch user
database. The password for all default accounts should be changed during the initial installation
and configuration for each switch.
and configuration for each switch.
Admin Domain and Virtual Fabric considerations: Administrators can act on other accounts only if
that account has an Admin Domain or Logical Fabric list that is a subset of the administrator.
that account has an Admin Domain or Logical Fabric list that is a subset of the administrator.
Displaying account information
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the appropriate show operands for the account information you want to display:
•
userConfig
--
show -a to show all account information for a logical switch
•
userConfig
--
show username to show account information for the specified account
•
userConfig
--
showad -a adminDomain_ID to show all accounts permitted to select the
specified adminDomain_ID
•
userConfig
--
showlf -l logicalFabric_ID for each LF in an LF_ID_list, displays a list of users
that include that LF in their LF permissions.
Creating an account
1. Connect to the switch and log in using an account assigned to the admin role.
2. Enter the userConfig
--
add command.
3. In response to the prompt, enter a password for the account.
The password is not displayed when you enter it on the command line.
TABLE 14
Default local user accounts
Account name
Role
Admin Domain
Logical Fabric
Description
admin
Admin
AD0-255
home: 0
home: 0
LF1-128
home: 128
home: 128
Most commands have
observe-modify permission.
observe-modify permission.
factory
Factory
AD0-255
home: 0
home: 0
LF1-128
home: 128
home: 128
Reserved.
root
Root
AD0-255
home: 0
home: 0
LF1-128
home: 128
home: 128
Reserved.
user
User
AD0
home: 0
home: 0
LF-128
home: 128
home: 128
Most commands have observe-only
permission.
permission.