Supporting Admin Accounts for Dialup Connections
The NetScreen-5XT and the NetScreen-5GT devices support a modem connection for outbound dial-up disaster recovery situations. You can set up trustee accounts for the interface or for the modem. This topic describes the two types of trustees:
An interface trustee has access only to the Untrust interface through the Web UI. An interface trustee can only assign the IP address for the primary Untrust zone interface. Also, an interface trustee account can enable or disable ping responses from an interface. Interface trustees can select either a PPPoE or DHCP client using automatic IP address assignment or a static address assignment client.
A modem trustee can access, configure, and modify only the ISP1 and ISP2 settings. A modem trustee can also test and view the configurations for the ISP3 and ISP4 settings.
You can configure Modem Trustee and Interface Trustee accounts to have Read/Write or Read-Only levels of access.
The connection type to a device by a Trustee administrative account occurs exclusively, preventing any other connection type from occurring. The secure trustee connection prevents local console, Telnet, and SSH sessions to connect to the device if these other connection types attempt to use the trustee’s name or password.