GE D20MX - Remote and Local User Accounts; Factory Default User Account; System Default User Account

62 GE INFORMATION D20MX HARDWARE USER’S MANUAL
CHAPTER 5: CONFIGURING THE SOFTWARE
D20MX user accounts
The D20MX supports the following types of user accounts:
• Remote and local user accounts
• Factory default user account
• System default user account
Remote and local user accounts
The D20MX supports remote and local user accounts. Use remote user accounts whenever
possible to increase the level of security and to decrease user administration effort. To
implement remote user accounts, the D20MX uses Remote Authentication Dial-In User
Service (RADIUS) with CHAP, EAP-TTLS and PEAP authentication methods. Refer to the
B014-1NCG WESMAINT II+ for the D20MX Configuration Guide for details on how to
configure the D20MX to use RADIUS.
When RADIUS is used, your RADIUS server provides a role ID to the D20MX. The role ID
defines which commands and displays the user is allowed to access while logged in to the
D20MX. To allow your RADIUS server to provide a role ID, configure your RADIUS server to
use the GE vendor profile that is common to many Multilin products. Refer to the B014-
1NCG WESMAINT II+ for the D20MX Configuration Guide for details on how to configure
your RADIUS server and the D20MX with the GE vendor profile. Also refer to
Appendix A,
Default Role-Based Access Control Model for the default role based access control model
provided with the D20MX default configurations.
In the event all configured RADIUS servers are down or if RADIUS is not configured, the
D20MX authenticates the user against the local configuration and password file. Local
users are created with a default password of changeme. Use the passwd command from
the D20MX SHELL prompt to change the default password to a strong password as soon
as possible after downloading the configuration. Refer to the B014-1NCG WESMAINT II+
for the D20MX Configuration Guide for details on how to configure local user accounts and
change the password of a user.
Factory default user account
The factory default configurations for the D20MX come with one default user account with:
• username: admin
• password: changeme
Replace this account or change the password for this account as soon as possible. Refer to
the B014-1NCG WESMAINT II+ for the D20MX Configuration Guide for details on how to
modify user accounts and how to change the password of a user.
System default user account
The D20MX configuration can be defaulted by pressing CTRL-F on a terminal connected
over the front RS232 port during startup. In addition, if the D20MX detects a corrupt
configuration on startup, it generates a system default configuration. The system default
configuration comes with one user account:
•username: recover
• password: system
Login with this username and synchronize a configuration to the D20MX over the front
RS232 port.