Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Users and Access Privileges

 

Access privileges to the BTI7800 are managed by associating a user with an access group. The group defines the access privilege level for a user.

Users

The BTI7800 creates a default user admin that has full system access privileges. The purpose of the default user is to allow first time access to the BTI7800 for initial system connectivity and configuration tasks. The user admin cannot be deleted.

Note

For security purposes, once you complete initial configuration tasks, you should change the admin user password. It is also recommended that you create new users with full (superuser) access privileges instead of continuing to use the admin user to manage your system.

Caution

Do not forget the passwords to your superuser accounts. If you forget the passwords to all of your superuser accounts, you will need to recommission the system in order to regain superuser access.

Access Privileges

The BTI7800 supports the following access privilege groups:

Table 1: BTI7800 Access Privilege Groups

Group Name

Access Level

superuser

Full access to all system operations.

provisioning

Access to most network management configuration tasks. This level does not have access to some administrative tasks.

surveillance

Read-only access to monitor system operations.

Adding a User Account

Use this procedure to add a user account to the local configuration database.

The following restrictions apply:

  • Only a user with superuser privileges can create, modify, and delete user accounts.

Note

To ensure there is at least one user with full system access, BTI7800 prevents deleting and editing the name and access privilege of the admin user.

  1. Enter configuration mode.
    bti7800# config
  2. Create the user, including name, password, and access privilege group.

    For example:

    bti7800(config)# users JohnSmith group provisioning password "<password>"
    Note

    See the BTI7800 Series Command Line Reference Guide for information on how passwords with non-alphanumeric characters are entered.

  3. Display the list of users.
    bti7800(config)# do show running-config users

    The passwords are displayed in an encrypted form.

Configuring User Session Parameters

Use this procedure to configure user session parameters.

User session parameters govern CLI behavior for the specified user. You can create command aliases, change the prompt, configure the idle timeout, and control many more session parameters. For a complete list of parameters, see the BTI7800 Series CLI Reference Guide.

  1. Enter configuration mode.
    bti7800# config
  2. Enter user-profile mode for the user you want to manage.

    For example:

    bti7800(config)# user-profile user

    If the profile does not exist, it is created.

  3. Set the various parameters as desired.

    For example, to disable the autowizard, enable pagination, and to set the idle timeout to 300 seconds:

    bti7800(config-user-profile-user)# session autowizard false
  4. Apply the changes.

    For example:

    bti7800(config-user-profile-user)# commit
    Note

    Some changes take effect immediately. Others take effect when you reenter configuration mode. Yet others take effect the next time you log in.

Resetting the Password for the admin User

Use this procedure to reset the admin user’s password to the factory default setting. This procedure requires you to log in to the craft interface. You cannot reset the admin password over the management network.

Note

This procedure is specific to resetting the password for the user called admin. It cannot be used to reset any other user’s password.

  1. Log in to the craft interface of the active CMM as the admincraft user. See Logging In to the CMM Craft Ethernet or Craft Serial Ports.

    If you do not know which CMM is active, try one CMM, and if the login attempt fails, try the other. The admincraft user is only allowed to log in to the active CMM. The system rejects any login attempts as the admincraft user on the standby CMM.

  2. Start a CLI session.
    • If you log in on the craft serial port, you are placed into the commissioning shell. Type cli to start a CLI session.

    • If you log in on the craft Ethernet port, you are automatically placed into a CLI session.

  3. Reset the admin password using the debug utilities command.
    bti7800# debug-utils reset-admin-password

    The admin password is now reset to the factory default setting.

  4. Type exit to exit the CLI session.
Release History Table
Release
Description
Use this procedure to reset the admin user’s password to the factory default setting.