AudioCodes Mediant 8000 - 33.18 Administering Command Line Interface (CLI) Users

Version 6.6 361 October 2014
Installation & Operation Manual 33. Configuring Security Settings
33.18 Administering Command Line Interface (CLI)
Users
This chapter provides detailed instructions on how to administer (add / delete / modify)
users on the Mediant 8000 Command Line Interface. Ensure that you are familiar with
the Mediant 8000 Command Line Interface (CLI) and its major features, as described
in 'The Command Line Interface (CLI)' on page 107, prior to proceeding with this
chapter
33.18.1 CLI Users Database and Operation Modes
Each CLI user must be defined in a CLI Users Database that contains the following
information:

User Name

User Profile (user type, home directory, password change policy etc)
User Password The Mediant 8000 supports the following types of CLI Users
Database:

Local CLI Users Database – information is stored locally on both SC boards in
the standard plain-text files (/etc/passwd and /etc/shadow). The local CLI User
database is replicated from the Active SC board to the Standby SC board to
ensure that the same CLI usernames and passwords are available when
connecting to the CLI interface on both SC boards. See 'Synchronizing the CLI
Users Database with the EMS Server' on page
367.

Local CLI Users Database Synchronized with the EMS server – information is
stored locally on SC boards, however is synchronized with the EMS user
database. The same usernames and passwords are used both for logging into
the EMS GUI and accessing the Mediant 8000 CLI interfaces. See
'Synchronizing the CLI Users Database with the EMS Server' on page
367.

Centralized CLI Users Database on RADIUS Server – The CLI Users
Database is maintained on an external RADIUS server. On-line protocol
(RADIUS) is utilized by the Mediant 8000 to authenticate CLI users. The same
protocol may be used by the EMS server to authenticate EMS users. See
'Centralized AAA Servers' on page
375.
Root and ems users are always defined in a Local CLI Users Database. This ensures
that basic management and configuration tasks may be performed even when Media
Gateway is completely isolated from any other network element.
Note: Even when the Mediant 8000 is configured to work with a centralized CLI
Users database on the RADIUS server, root and ems users are defined in the
local CLI Users database (on SC boards).
The Mediant 8000 is configured for Local CLI Users Database Synchronized with
EMS Server operation mode by default.