Symmetricom EDGE CLOCK 1000 - Manual (Page 95)

097-58001-02 Revision G – April 2008 TimeProvider User’s Guide 95
Chapter 4 Provisioning the TimeProvider
Defining the Security Parameters
User – Users entered into the user list at the User level can issue commands set
at the User access level
Admin – Users entered into the user list at the Admin level can issue commands
set at the Admin access level
Security – Users at this access level can issue every command available
You can edit the commands available at each access level using the ED-CMD-
SECU command. You can display the current access level for each command by
issuing the RTRV-CMD-SECU command. See the TimeProvider TL1 Reference
Guide for details on these commands. Record the values you provision in
Table 4-4 .
The first person to log into the TimeProvider is automatically assigned the Security
access level (described in
Defining a User at the Security Access Level , on page
95); this person normally performs the initial provisioning and defines users and
their appropriate access levels.
Defining a User at the Security Access Level
TimeProvider Access Levels
The security measures built into the TimeProvider are based on a list of users
authorized to access the unit. Each user has their own password and is assigned to
one of the following access levels: NONE, USER, ADMIN, or SECURITY. Users can
issue the TL1 commands available at their access level.
Managing the User List , on
page 96, describes how to manage the user list.
If you do not define a Security-level user, the security features are not enabled and
an unauthorized user could gain access to the TimeProvider and compromise the
security of your network.
If you define a user at a level other than Security before you define a Security-level
user, you cannot execute Security-level commands. You will need to contact
Symmetricom Global Services (see
Obtaining Technical Assistance , on page 187)
to correct this problem.
Recommendation: To avoid a possible service call to unlock the
TimeProvider, Symmetricom recommends that you enable the
security feature by defining a user at the Security access level.
Note: The factory default security setting is None, which allows all
users to access the system.
Recommendation: Symmetricom recommends that you record
and store the Security-level user’s name and password in a
secure location.