6. Security and Logins6-14 September 2002 9128-A2-GB20-80Controlling Router CLI AccessThe FrameSaver SLV 9126-II Router can be managed from an NMS using SNMP,or from the router’s command line interface (CLI). There are two methods toaccess the command line interface: Local access at the router through the COM port, or Access via a Telnet session.Telnet access defaults to Administrator level. If the current login is at theOperator level, only Operator level access is available for the session. Telnetaccess is always enabled.The router accepts one CLI login session at a time and is configured at the factorywithout a default login ID and password. To provide login security to the system,configure a login ID and password.When a local console connection is first established, a login prompt appears. If theDevice Name field has been configured via the Control menu(Control Menu →System Information), the login prompt displays the device name.For example, a device name of Largo is shown as:Largo>SeeCreating a Login on page 6-12 for security information for each Login ID.Access Levels (Command Modes)There is one login ID and several levels of privileges for the router’s CLI. Your useraccount can be configured with one user name and different passwords for: Operator. The Operator has read-only access to display device informationwith no modification permission and limited access to diagnostic functions.With a device name of Largo, the prompt appears as Largo>. Administrator. The Administrator has several levels of access to the router’sCLI. The # sign in the following prompts indicates Administrator access level.Refer to Appendix C,Router CLI Commands, Codes, and Designations, foraccess level details for each command line entry.Display Prompt with Device Name of Largo Administrator Access LevelsLargo #> Standard (same as Operator)Largo(config) # ConfigurationLargo(config-if) # Configuration InterfaceLargo(config-subif) # Configuration Sub-InterfaceLargo(config-dhcp) # Configuration DHCP Pool
