Alcatel Carrier Internetworking Solutions omniswitch User Manual

Overview of User Accounts

Managing Switch User Accounts

page 7-4

OmniSwitch 6600 Family Switch Management Guide

• Secure Shell—Any standard Secure Shell client may be used for logging into the switch.

• SNMP—Any standard SNMP browser may be used for logging into the switch.

For more information about connecting to the switch through one of these methods, see 

and the OmniSwitch 6600 Family Getting Started Guide.

For information about setting up the switch to allow user access through these interfaces, see 

By default, a single user management account is available at the first bootup of the switch. This account 
has the following user name and password:

• user name—admin

• password—switch

Initially, the admin user can only be authorized on the switch through the console port. Management 
access through any other interface is disabled. The Authenticated Switch Access commands may be used 
to enable access through other interfaces/services (Telnet, HTTP, etc.); however, SNMP access is not 
allowed for the admin user. Also, the admin user cannot be modified, except for the password.

Password expiration for the admin user is disabled by default. See 

.

In addition, another account, default, is available on the switch for default settings only; this account 
cannot be used to log into the switch. It is used to store and modify default settings for new users.

Note. Up to 64 users may be configured in the local switch database. 

To set up a user account, use the user command, which specifies the following:

• Password—The password is required for new users or when modifying a user’s SNMP access. The 

password will not appear in an ASCII configuration file created via the snapshot command.

• Privileges—The user’s read and write access to command domains and families. See 

 for more details.

• SNMP access—Whether or not the user is permitted to manage the switch via SNMP. See 

 for more details.

• End-User Profile—The user’s read and write access to command areas, port ranges, and VLAN ranges; 

used for customer login accounts. See 

Typically, options for the user (privileges or end-user profile; SNMP access) are configured at the same 
time the user is created. An example of creating a user and setting access privileges for the account is 
given here:

-> user thomas techpubs read-write domain-policy md5+des

For more details about command syntax, see the OmniSwitch CLI Reference Guide.