52
consists of a single module (e.g., LACP, RSTP or QoS), but a few groups contains more
than one module. The following describes the groups which contain multiple modules or
access to various system settings:
■ System: Contact, Name, Location, Timezone, Log
■ Security: Authentication, System Access Management, Port (contains Dot1x port, MAC
based and the MAC Address Limit), ACL, HTTPS, SSH, ARP Inspection, and IP source
guard.
■ IP: Everything except for ping.
■ Port: Everything except for VeriPHY.
■ Diagnostics: ping and VeriPHY.
■ Maintenance: CLI - System Reboot, System Restore Default, System Password,
Configuration Save, Configuration Load and Firmware Load. Web - Users, Privilege
Levels and everything in Maintenance.
■ Debug: Only present in CLI.
◆ Privilege levels – Every privilege level group can be configured to access the following
modules or system settings: Configuration Read- only, Configuration/Execute Read-write,
Status/Statistics Read-only, and Status/Statistics Read-write (e.g., clearing statistics).
The default settings provide four access levels:
■ 1 – Read access of port status and statistics.
■ 5 – Read access of all system functions except for maintenance and debugging
■ 10 – read and write access of all system functions except for maintenance and
debugging
■ 15 – read and write access of all system functions including maintenance and
debugging.
WEB INTERFACE
To configure privilege levels:
1. Click Configuration, Security, Switch, Privilege Levels.
2. Set the required privilege level for any software module or functional group.
3. Click Save.
Authentication Method Configuration
Use the Authentication Method Configuration page to specify the authentication method for
controlling management access through the console, Telnet, SSH or HTTP/HTTPS. Access
can be based on the (local) user name and password configured on the switch, or can be