Ciena 5150 - Creating a New User Account

3-2 Turning Up the System
5150 Service Aggregation Switch Hardware Installation and Start-up Manual
009-3222-001 Standard Revision H
Copyright
©
2012-2015 Ciena
®
Corporation July 2015
Creating a New User Account
The 5150 is preconfigured with default user accounts. The default user
accounts are common to all Ciena Carrier Ethernet products and are not
confidential. When you turn-up the system you need to configure new user
accounts and delete the default accounts in order to protect the system.
Ensure that the new passwords are captured and distributed according to site
security guidelines.
The default user accounts and passwords are summarized in Table 3-1.
A user at the super access level can create user accounts with the following
access levels:
• limited (read-only)
• admin (read/write)
Table 3-1
Default User Accounts and Passwords
User Name Password Access Rights Access Level
user <empty> Read-only Limited user — Monitors the system and gathers
information about the configuration and performance
of the system. A restricted command set protects
user accounts in this group from changing the state of
the system in a significant way or changing the
system configuration.
admin wwp Read/write Admin user — Makes significant system state
changes and modifies the system configuration.
Admin user accounts include all access rights of
limited user accounts.
su wwp Read/write/create Super user — Manages secure access to the switch
through creation, deletion and modification of user
accounts. Super user accounts include all access
rights of admin user accounts. The primary purpose
of super user accounts is user account maintenance.
Only super user accounts have access to all user
administration commands. A user with a super user
account can create new user accounts at any access
level.
At least one user account at the super user access
level must be configured on the system.
gss pureethernet Read/write/create/
debug
Diagnostic user — Supported for exclusive use by
Ciena Customer Support. It is not an access level
intended for use by the network operator.