Configuring Security Settings > Creating User Profiles with the SNMPv2c Version of the NMC-RX Application

Creating User Profiles with the SNMPv2c Version of the NMC-RX Application

User profiles are created differently depending on which version of SNMP was chosen during the installation of the NMC-RX application. If you are using the SNMPv2c version of the NMC-RX application, use this section. If you are using the SNMPv3 version of the software, see Creating User Profiles with the SNMPv3 Version of the NMC-RX Application.

Only a security user can create a user profile. When you create a user profile, you can:

• Set the username and password.
• Select how the user login is authenticated (either locally or through a RADIUS authentication server; see Configuring User Authentication Settings).
• Assign a privilege level to the user.
• Configure SNMPv2c

User Privilege

Only users with the Security privilege enabled can modify the User Privilege settings. All user, however, can modify their own password.

User privileges are divided into three categories:

• Security—Allows access to administer application-specific settings, such as inserting or removing members of groups, creating groups and new user profiles, and setting user authentication settings.
• Device Maintenance—Allows access to all device-specific settings or features.
• Device Administration—Allows access to device-specific settings and features. You can specify five areas for the device administration category: view, create, configure, delete, and execute.

To create a user profile:

1. From the Configuration menu in either the Network Workshop or the Device Workshop, select Create, and click User Profile.

The Create User Profile dialog box appears.

2. Set the user profile parameters (Table 25).

 Table 25:  User Profile Parameters 

 Parameter
 Description

 User Name

 Name that identifies the user; range 1-32 characters; must contain at least one alphabetic and one numeric character


 User Authentication

 Mode

 (See Configuring User Authentication Settings earlier in this chapter for more information.)
 Determines the type of login:

  
 Local—Authenticates the user login locally
  
 RADIUS—Authenticates the user login through a RADIUS server



 Test Login

 When enabled (checked) and user authentication mode is set to RADIUS, the remote login action is tested.


 Password

 Password, which must be between 6 and 16 characters and contain at least one alphabetic and one numeric character. The password that the administrator assigns is the default password, and a user can change it.


 Re-enter Password

 Password that you typed in the User Password field


 User Privilege
 


 Privilege Settings

 Level that determines what actions a user can take in regard to a particular object.

  
 Security—Allows a user to administer application settings. For example, a user is limited to creating groups and devices, and cannot access the Device Workshop or perform device configuration.
  
 Device Maintenance—Allows access to all device-specific settings or features



 Device Administration

 Level that determines what actions a user can take in regard to a particular object.

  
 View—Allows a user to view the configuration of a device.
  
 Create—Allows a user to create configurations on a device.
  
 Configure—Allows a user to configure a device.
  
 Delete—Allows a user to delete the configurations of a device.
  
 Execute—Allows a user to execute certain device actions. For example, the user is allowed to run ping on a device or log in remotely to a device.



 Remote Login
 


 SSH User Name Source


  
 NMC-RX User Name—Select if you always want to use the NMC-RX username as the SSH username source. This is the default.
  
 Other User Name—Select if you want to use a username other than the NMC-RX username as the SSH username source. When selected, the text box to the right of the field is active and you can edit the text. 

 Type the user name in the text box. The username can be from 1 to 128 characters.


 User Preferences
 


 Single Click Object View

 Indicator that specifies whether or not you can view the current configuration of an object with a single click. When checked, single-click view mode is enabled; default: disabled (cleared)


 SNMPv2c
 


 Community String:

 Used to authenticate messages sent to the device. Default: public
 NOTE: For additional information about SNMP, see JUNOSe System Basics Configuration Guide, Chapter 3, Configuring SNMP.



 

 NOTE: You cannot delete the Admin user profile (admin), but you can modify the default password (nmc-rxadmin).



 

3. To save the settings, click OK.