User Configuration

Overview

User management is an authentication feature that provides administrators with the ability to identify and control the users who log into the network.

OcNOS provides 4 different roles for users.

  • Network Administrator: Can make permanent changes to the switch configuration. Changes are persistent across reset or reboot of switch.
  • Network Engineer: Can make permanent changes to the switch configuration. Changes are persistent across reset or reboot of switch.
  • Network Operator: Can make permanent changes to the switch configuration. Changes are not persistent across reset or reboot of switch.
  • Network User: Can display information but cannot modify the configuration.

User Configuration

#configure terminal

Enter configure mode.

(config)#username user1 password User12345$

Create a user user1 with password User12345$ with default role of network user. Password must be 8-32 characters, username 2-15 characters.

(config)#username user1 role network-operator password User12345$

Change the role for user1 to network-operator.

(config)#username user2 role network-operator password User12345$

Create a user user2 with role as network-operator.

(config)#username user3 role network-admin password User12345$

Create a user user3 with role as network-admin.

(config)#username user4 role network-engineer password User12345$

Create a user user4 with role as network-engineer.

(config)#commit

Commit the candidate configuration to the running configuration

(config)#exit

Exit configure mode.

Validation

Copy
#show user-account
User:user1
                roles: network-operator
User:user2
                roles: network-operator
User:user3
                roles: network-admin
User:user4
                roles: network-engineer
 
 
#show role
Role Name                               Info
------------------------------------------------------------------------
network-admin          Network Administrator - Have all permissions
network-engineer       Network Engineer - Can save configuration
network-operator       Network Operator - Can not save configuration
network-user           Network User - Can not change configuration
rbac-customized-role   RBAC User - Can change only  permitted configuration
 
#show user-account user1
User:user1
                roles: network-operator