Total Access 600R System Manual Section 4 User Interface Guide
61200600L1-1A © 2002 ADTRAN, Inc. 49
Table 3. Telnet Security Levels
SYSTEM CONFIG > MANAGEMENT > TELNET ACCESS > IP ACCESS LIST
Set up the list of allowed Telnet managers.
Security
Level
Description
Full The user has all access to view and configure all menus (same as logging in to
the CRAFT port)
Support The user has read-only access to view the S
YSTEM INFO menu. The user has
privileges to view and change everything under the S
YSTEM CONFIG menu
except for the CRAFT port settings, Telnet access lists, and SNMP
management communities. The user has full access to the S
YSTEM UTILITY
menu, including the ability to upgrade firmware and reset the unit. The user has
full access to the I
NTERFACES, L2 PROTOCOL, BRIDGE, ROUTER, and DS0 menus.
The user does not have the ability to set R
ADIUS SERVER settings under the
S
ECURITY menu.
Config The same privileges as support, except that the user does not have privileges to
download firmware or configuration from the S
YSTEM UTILITY menu. The user
additionally does not have the privilege to reset the unit remotely, or enter the
terminal menu.
Router The user has read-only privileges for the S
YSTEM INFO menu. There is no access
to the S
YSTEM CONFIG menu. The user has PING and TRACEROUTE access from
the S
YSTEM UTILITY menu. The user is limited to Ethernet configuration and
status from the I
NTERFACES menu. The user has full access to the BRIDGE and
R
OUTER menus. Access is limited to filters only from the SECURITY menu.
Status The user has read access of all menus except for the following: S
YSTEM
C
ONFIG/CRAFT PORT, SYSTEM CONFIG/TELNET ACCESS, SYSTEM CONFIG/SNMP
M
ANAGEMENT, and SECURITY/ RADIUS SERVER. The user does not have access
to U
PGRADE FIRMWARE, UPGRADE CONFIG, PING, or TRACEROUTE menus. The
user cannot reset the unit or enter terminal mode.
N
ETWORK ADDRESS AND MASK
Enter a network address and subnet mask from which Telnet access to the unit is allowed. When a
remote unit requests Telnet access to the unit, if the access list is empty or the remote’s IP address
matches a list entry, remote access is granted. A subnet mask of 0.0.0.0 will allow any host Telnet
access, regardless of the network address. A network address of 0.0.0.0 with corresponding netmask
255.255.255.255 will not allow any host Telnet access.
The factory default is
0.0.0.0. for both parameters, which will allow all users Telnet IP access.