Create new User Accounts for PacketShaper
Article ID: 267058
Updated On:
Products
Issue/Introduction
You would like to create new user accounts in addition to the default 'touch' and 'look' users.
Environment
Local User Accounts
PacketShaper allows two user roles: the look user has read-only access and the touch user has read-write access.
Touch users can access all commands and full PacketShaper functionality. Look users cannot access commands
that modify the PacketShaper's configuration. Nor can the look user retrieve sensitive information, issue
commands that would impact the performance of the unit, or create, edit, or delete classes, policies, or partitions.
When a look user is logged in, the browser interface only presents the options that are available with look access.
For example, the class menu is not shown on the Manage tab because look users cannot add, delete, or rename
classes. The look user can view all the setup pages, but the apply changes button is not available because this
type of user cannot change the settings.
Cause
PacketShaper only allows two user accounts: 'touch' and 'look'. The default password for the touch user is touch and the look user is look. There may be a need to create additional user accounts with different usernames and different roles. For that, you will have to use Third Party Authentication.
Resolution
Third-Party User Authentication
PacketShaper local authentication offers two user accounts: touch and look . Third-party user authentication, such
as RADIUS and TACACS+, allow you to have many user accounts and assign different logins/passwords to each
user. If you want to take advantage of your third-party user authentication, login, and accounting features, you can
integrate PacketShaper with RADIUS or TACACS+.
You can refer to PacketGuide for more details on RADIUS or TACACS+ setup.
Feedback
