Allied Telesis Support Portal

How do I add new users to the authentication database on Allied Telesis devices running AlliedWare plus?

How do I add new users to the authentication database on AR Routers or L3 series Switches?

Introduction

The AlliedWare Plus device will initially be configured with a default username and password (manager/friend) with access privilege level of 15. Once logged into the device you are allowed to create new users or modify existing users to set their access privileges. When you create a new user, the default username privilege level of 1 is not shown in running-config output, however any username privilege level that has been modified from the default is shown.

Rules

<name>
  The login name for the user. Do not use punctuation marks such as single quotes (‘ ‘), double quotes (“ “), or colons ( : ) with the user login name.


privilege <1-15>  The user’s privilege level. Use the privilege levels to set the access rights for each user.
A privilege level: either 1-14 (limited access) or 15 (full access). A user with privilege level 1-14 can only access higher privilege levels if an enable password has been configured for the level the user tries to access and the user enters that password. A user at privilege level 1 can access the majority of show commands. A user at privilege level 7 can access the majority of show commands including platform show commands. Privilege Level 15 (to access the Privileged Exec command mode) is required to access configuration commands as well as show commands in Privileged Exec.

password [8]  Specifies that you are entering a password as a string that has already been encrypted, instead of entering a plain-text password. The running-config displays the new password as an encrypted string even if password encryption is turned off.
Note that the user enters the plain-text version of the password when logging in.

 <password>  The user’s password. The password can be up to 23 characters in length and include characters from up to four categories. The password categories are: 
• uppercase letters: A to Z
• lowercase letters: a to z
• digits: 0 to 9
• special symbols: all printable ASCII characters not included in the previous three categories. The question mark ? cannot be used as it is reserved for help functionality.


Create user

To create a user on the device, log in to the device and enter the "Privileged Exec" mode, then enter the command:

Examples:

awplus# configure terminal
awplus(config)# username <name> privilege <1-15> [password [8] <password>]
 
awplus# configure terminal
awplus(config)# username <name>  password [8] <password>

To remove a user on the device, log in to the device and enter the "Privileged Exec" mode, then enter the no variant form of the command:
awplus# configure terminal
awplus(config)# no username <name>
**** Ensure that you create a new user with privilege 15 before you delete or modify the device default, or you will lose access to the device. If this happen you will have to reset device back to factory defaults to recover.