Welcome to Dell Technologies Connectrix Cisco MDS-Series How-to Videos.
How to create user accounts for CLI access.
Reference Dell Knowledge Article No. 181111.
This video was created to:
Demonstrate the steps to create, modify and manage Cisco user account
to access the Cisco MDS 9000 switch via console, SSH or Telnet.
You can configure up to a maximum of 256 users on a switch.
Every Cisco MDS 9000 Family switch user has the account information stored by the system.
Your authentication information, user name, user password, password expiration date
and role membership are stored in your user profile.
This video presents the following:
The steps to configure a new user with CLI access or to modify the profile of an existing user.
User passwords are not displayed in the switch configuration file.
Passwords are case-sensitive.
The password is limited to 64 characters.
Cisco MDS SAN-OS does not support all-numeric user names
whether created with TACACS+ or RADIUS, or created locally.
Local users with all-numeric names cannot be created.
If an all-numeric user name exists on an AAA servicer and is entered during login
the user is not logged in.
The following words are reserved and cannot be used to configure users.
When to do this:
When you want to create new user accounts to grant users or administrators
with minimum amount of system rights or privileges required to perform their job.
When you want to modify the profile of an existing user.
Enter into Configuration mode.
Create a user account â€œusamâ€
along with a password that is set to expire on December 31, 2025.
â€œshow user-account usamâ€ displays configured information about a specific user account.
You can also use â€œshow user-accountâ€ command without any arguments
to display the information for all users.
Create the user account â€œmsamâ€
along with a password specified in clear text, indicated by zero.
Check the configured information about â€œmsamâ€ .
To delete specified user â€œmsamâ€ , run the command â€œno username msamâ€ .
Add the specified user, â€œusamâ€ , to the network admin role.
You can notice that user â€œusamâ€ now has both network-operator and network-admin role.
Now, log in with the account â€œusamâ€ using the password specified while creating this user.
Run the command â€œshow usersâ€ .
It displays all logged-in users.
To log out another user on the switch, use the â€œclear userâ€ command.
The user name â€œusamâ€ is logged out from the switch.
Important notes:
Cisco MDS 9000 switch comes with two predefined roles:
network-admin and network-operator.
Network-admin is the role assigned to the predefined user called admin.
The network-admin can perform any modification to the MDS 9000 platform.
There are no restrictions on this user.
Network-operator is a predefined read-only role.
The network operator cannot make modifications to the Cisco MDS 9000 switch.
There are no predefined users assigned to this role.
Refer to the following for more information.
Thank you for watching.