ENGINE AR 2797813 - Caterpillar

Local Users
Setting User Access
Path: Administration > Security > Local Users > options
The Administrator user account always has access to the UPS Network Management Card (NMC).The Device User and Read-Only User accounts are enabled by default. To disable the Device User or Read-Only User accounts, select the user account from the left navigation menu, then clear the "Enable" checkbox.You set the case-sensitive user name and password for each account type in the same manner. Maximum length is 64 characters for a user name and 64 characters for a password. Blank passwords (passwords with no characters) are not allowed.ReferenceFor information on the permissions granted to each account type (Administrator, Device User, and Read-Only User), refer to the "Types of User Accounts" section in the, "General Information" chapter of this manual.
Table 1
Account Type    Default User Name    Default Password    Permitted Access    
Administrator     cat     cat     "Web Interface" and "Command Line Interface"    
Device User     device     cat    
Read-Only User     "readonly"     cat     "Web Interface" only    Remote Users
Authentication
Path: Administration > Security > Remote Users > Authentication Method
Use this option to select how to administer remote access to the NMC.ReferenceFor information about local authentication, not using the centralized authentication of a RADIUS server, see the Security Handbook.The authentication and authorization functions of RADIUS (Remote Authentication Dial-In User Service) is supported.
When a user accesses the Network Management Card or other network-enabled device that has RADIUS enabled, an authentication request is sent to the RADIUS server to determine the users permission level.
RADIUS user names used with the Network Management Card are limited to 32 characters.Select one of the following:Local Authentication Only - RADIUS is disabled. Local authentication is enabled.RADIUS, then Local Authentication - RADIUS and local authentication are enabled. Authentication is requested from the RADIUS server first. If the RADIUS server fails to respond, local authentication is used.RADIUS Only - RADIUS is enabled. Local authentication is disabled.Note: If RADIUS Only is selected, and the RADIUS server is unavailable, improperly identified, or improperly configured, remote access is unavailable to all users. Use a serial connection to the "Command Line Interface" and change the access setting to local or "radiusLocal" to regain access. For example, the command to change the access setting to local would be:radius -a localRADIUS
Path: Administration > Security > Remote Users > RADIUS
Use this option to do the following:
List the RADIUS servers (a maximum of two) available to the NMC and the time-out period for each.
Click on a link, and configure the parameters for authentication by a new RADIUS server.
Click a listed RADIUS server to display and modify the servers parameters.
Table 2
RADIUS Setting    Definition    
RADIUS Server     The server name or IP address (IPv4 or IPv6) of the RADIUS server. Click on a link to configure the server.
RADIUS servers use port 1812 by default to authenticate users. To use a different port, add a colon followed by the new port number to the end of the RADIUS server name or IP address.