• Download PDFs
• Configuring User Access (NSM Procedure)  

• Related Topics
• Configuring RADIUS Authentication (NSM Procedure)
• Configuring TACACS+ Authentication (NSM Procedure)
• Configuring Authentication Order (NSM Procedure)

Configuring User Access (NSM Procedure)

This section includes the following topics:

Configuring Login Classes

You can define any number of login classes and then apply one login class to an individual user account. All users who can log in to the router must be in a login class. With login classes, you define the following:

• Access privileges users have when they are logged in to the router
• Commands and statements that users can and cannot specify
• How long a login session can be idle before it times out and the user is logged out

To configure login classes:

1. In the NSM navigation tree, select Device Manager > Devices.
2. Click the Device Tree tab and then double-click the device for which you want to configure a login class.
3. Click the Configuration tab. In the configuration tree, select System > Login > Class.
4. Add or modify login class settings as specified in Table 1.
5. Click one:
   • New—Adds a new login class.
   • OK—Saves the changes.
   • Cancel—Cancels the modifications.

Table 1: Login Class Authentication Configuration Details

Option	Function	Your Action
Name	Specifies a name for the login class.	Enter a name for the login class.
Allow Commands	Specifies the operational mode commands that members of a login class can use.	Enter the command name enclosed in quotation marks. For example, “request system reboot”.
Login > Class > Permissions
Permissions	Configures the login access privileges to be provided on the device.	Enter a new permission.

Configuring User Accounts

User accounts provide one way for users to access the device. (Users can access the router without accounts if you configured RADIUS or TACACS+ servers.) For each account, define the login name for the user and, optionally, information that identifies the user. After you have created an account, a home directory is created for the user.

To configure user accounts:

1. In the NSM navigation tree, select Device Manager > Devices.
2. Click the Device Tree tab and then double-click the device for which you want to configure login class.
3. Click the Configuration tab. In the configuration tree, select System > Login > User.
4. Add or modify login class settings as specified in Table 2.
5. Click one:
   • New—Adds a new user account.
   • OK—Saves the changes.
   • Cancel—Cancels the modifications.

Table 2: User Authentication Configuration Details

Option	Function	Your Action
Name	Identifies the user with a unique name.	Enter a unique name for the user.
Class	Specifies the user's login class.	Select the class name.
Login > User > Authentication
Plain Text Password Value	Specifies the user’s password.	Enter the plain text password for the user.