Cabletron Systems TPRMIM-22 Guía de usuario descargar pdf (Pagina 32)

Security Issues

Introduction

1-6

Enterprise Conﬁguration Manager

User’s Guide

Security Issues

Enterprise Conﬁguration Manager is a powerful tool. Because it gives users

the ability to reconﬁgure any number of devices on a network, the

administrator should use extreme caution when setting up user-privileges.

ECM is designed so that network administrators can restrict the types of

operations that a user can perform. For example, you may want to prevent

inexperienced users from creating or loading conﬁgurations — these are the

two operations, when misused, which could cause damage to a functioning

network. With ECM’s security features, the administrator can set up accounts

for these users allowing them to view and verify but not create and load

conﬁgurations.

There are two ways to provide security when working with Enterprise

Conﬁguration Manager: SPECTRUM security and SNMP security:

• SPECTRUM security controls a user’s access to all network management

operations for any device.

• SNMP security, on the other hand, controls a user’s access to a single

device.

SPECTRUM and SNMP security are described in the following sections.

For speciﬁc details about setting up community strings in SPECTRUM, refer

to the SPECTRUM Administrator’s Reference.

SPECTRUM Security

In SPECTRUM, the system administrator maintains security by issuing users

a community string. This community string can have one or more parts, each

part specifying permissions for a certain “community.” For example, the

community string ADMIN,0:ECM,3 gives the user access to all SPECTRUM

administration privileges but only View, Verify, and Load privileges in ECM.

The following rules apply to community strings:

• The SPECTRUM community string ADMIN,0 - 2 (without an additional

ECM community string) gives users full privileges in ECM.

• All ECM community strings require the ADMIN,0-9 community name as

a preﬁx. The correct format is ADMIN,0-9:ECM,0-8.

• ECM community strings give users the privileges that are speciﬁed in the

ECM part of the community string. It does not matter if the ADMIN part

of the community string speciﬁes greater or fewer privileges.

1 2 ... 27 28 29 30 31 32 33 34 35 36 37 ... 290 291

Sin comentarios

Cabletron Systems TPRMIM-22 Guía de usuario Pagina 32