|
|
Users must have sufficient access rights, or permission levels, to perform any operations on network elements (the devices, such as routers, that make up the network) or system-level resources (such as templates or log messages). In the GUI application developed by Cisco, these access rights are administered through the Permission Manager.
Permissions are granted to user groups, not individual users. Permission groups are created and managed by the SuperUser (login name: admin), using the Permission Manager window. This window is opened when you click on the Permission Manager button in the Main Window. While any user can use this window to review current permissions for the group to which the user belongs, only the SuperUser can create, delete, or modify a permissions group. A user cannot belong to more than one permissions group at a time.
superuser. The Cisco IP Manager SuperUser is an administrator that has access to all users and elements of the system.
Users are added to the system (as well as removed, and their data managed) in the User Manager window, which opens when you click on the User Manager button in the Main Window. Only the SuperUser can add a user to the system.
Log messages are generated periodically by the various servers that make up the Cisco IP Manager software. These messages are stored in the database; access to them is through the Log Viewer window. To open this window, click on the Log Viewer button in the Main Window.
Permissions groups are displayed in the pane on the left side of the window. The SuperUser (login: admin) can see all permissions groups; individual users can see only the group to which they belong. Only the SuperUser can make changes to groups.
Initially, no permissions groups appear in this pane. First you create a group, then add users to the group. You create the group with the Permission Manager. You must then separately open the User Manager and create users to add to the group.
Only the SuperUser can add a new permissions group.
Open the Permission Manager window and enter a name for the new permissions group in the New Group field in the pane on the left side of the window.
See the section "Name Restrictions" in "Managing Network Elements" for limitations on characters in names.
Click the Add button to add the new group to the bottom of the Permissions Group list.
You must add the group before you can add users or define permissions.
Select a group from the Permissions Group list in the pane on the left side of the Permission Manager window.
Use the tabs at the top of the pane on the right side of the window to add users and set permissions. Permissions are set per group, not per individual. All members in the group receive the same access rights.
Tabs are:
When you have set permissions, click the Apply button to save the permissions, or the Close button to close the Permission Manager window.
If this is the first time you have used the Cisco IP Manager software, only one entry---admin--- appears in the User List at the left side of the window. You should select this entry and change the password. How to do this is explained under "Password."
To add a new user to the database, enter a user name in the New User field and a password in the Password field beneath the User List in the left pane of the window. Enter the password a second time in the Retype Password field, and click the Add button. You must supply a password when you first add a user. You can change that password later, including making it zero-length. The maximum length for a password is 64 characters.
See the section "Name Restrictions" in "Managing Network Elements" for limitations on characters in names.
After a user has been added to the database, you can use the tabs in the pane on the right side of the window to provide additional information.
Enter into the Full Name field the full name to associate with the user highlighted in the User List in the left pane of the window. The maximum length for Full Name is 64 characters.
Enter into the Description field a description to associate with the user highlighted in the User List in the left pane of the window. The maximum length for Description is 128 characters.
The SuperUser (login: admin) can modify all data for all users, including passwords.
Individual users can see and modify only their own information.
To change passwords, click on the Password tab.The dialog shown in Figure 7-6 appears, with the Change Password radio button selected and your data displayed unless you are logged in as admin. (If you are the SuperUser, select a user from the list to see that user's information.)
Enter the current password in the Old Password field. Enter the new password twice, once in the New Password field and again in the Reenter password field. The maximum length for a password is 64 characters.
Clicking the Reset Password radio button resets the highlighted user's password to the system default (password). The Reset Password radio button is available only to the SuperUser; it is grayed out for any other user. You must click the Change Password radio button again to make entries in any of the fields.
The password change takes effect whenever you click the Apply or Close button, at which time a confirmation dialog is displayed.
Use the Profile tab to specify a Router User Name and Router Password. These fields can be up to 120 characters in length. If these two fields are set, this router user name and password will be used at the time of upload or download to log in to the router instead of the CIPM user name and password. Also refer to "VTY Tab" in "Managing Network Elements."
You can also specify to change the router password by clicking the appropriate checkbox.
When you have added users and modified their properties as you wish, click the Apply button to save the data, or the Close button to close the User Manager window.
The Log Viewer window opens.
The default time shown for each message is GMT, but you can also display it in local time.
The window is not refreshed automatically. Messages generated while the window is open are not displayed (nor are messages cleared when you purge the database) until you close and reopen the window, submit a new query, or click the Refresh button or Refresh item under the View menu.
The Log Viewer window contains three menus and eight buttons. The buttons correspond to some of the functions of the menus.
The Log Viewer window has the following menus:
The File menu has the following commands:
Highlight in the Files pane the file to import and click OK. You can change the Filter specification and click Update, and then the Files pane displays only those files that match the filtering criterion. If the file names have changed in the specified directory, use Update to display those files that match the filtering criterion. Navigate to different folders by highlighting the appropriate folder in the Folders pane; ".." specifies the parent folder. Your choice then appears in the Enter path or folder name field.
The Filter field default entry [^.]* is a regular expression that specifies displaying all files except those that begin with a dot, that is, all except hidden files. You can enter wildcard characters to display only the subset of files you wish to see. For example, *.log lists only those files with a .log extension.
When you click OK, a dialog indicating number of records appears while the data is being read. Click Close to close the dialog. The new data appears at the end of the current data displayed in the Log Viewer window.
Writes to a file the data currently displayed in the Log Viewer window. This might not be all the messages in the database if you have not refreshed the window, or if the database contains more than 5000 records. When you click on this menu item, a dialog (Export Log) appears in which you can navigate or directly specify a path or folder name, use a filter, or specify a file name. The controls of the Export Log dialog function the same as those of the Import Log described earlier under "Import..."
If the database contains fewer than 5000 records and no filters are in effect to limit the view, then all records in the database are present in the view. In such case, Export... and Export All produce the same result.
A dialog showing percentage progress and indicating number of records appears while the data is being written.
Click Close to close the dialog, or, before the export ends, Abort to terminate the process.
Writes to a file all log messages currently in the database. The difference between Export All and Export... is that the latter exports only those records currently displayed in the Log Viewer window. The functionality, including interaction with the Export Log, is the same as described under "Export..."
Or, choose the Do Not Overwrite Log (Clear Log Manually) button if you do not want to set a limit.
When you have entered your choices, click the Save button to save your settings, or click Close to dismiss the window without saving your changes.
The Default button resets the limit to 10,000 lines and selects the Automatically Overwrite... button.
The Log Server (LOGServer) automatically removes older messages from the database whenever this limit is reached. However, to enhance performance, the limit is checked only once for every 100 messages generated. So it is possible that the database could be 99 messages over the limit at any given time.
Purges the database of all log messages. When you select the Purge All menu option, a message box asks if you want to save the log messages first. If you click the No button, all messages in the database are purged immediately; click Cancel to cancel the operation. If you click the Yes button, a dialog (Export Log) appears in which you can specify the name of a file to which to save the data in the database. This dialog functions exactly as described earlier under "Export..." When you click OK here, all messages in the database are first saved to the specified file, and then purged from the database.
Counts the number of messages currently in the database and displays the result in a message box.
Closes the Log Viewer window.
Closes all open Cisco IP Manager windows and exits the software.
The View menu has the following commands:
The Server button produces a drop-down list of Cisco IP Manager servers within which to search; the default is (All).
The Source field identifies the location within the server software that caused the log message to be generated.
Use the Message field to specify a string of characters; if that string is contained in a message that also meets the other criteria, the message is displayed in the Log Viewer window.
You can enter data into any combination of these fields; messages meeting your specified criteria are displayed when you click the OK button. (Only the administrator can view messages generated by all users; non-administrator users can view only their own messages.)
Click the Cancel button to dismiss the Search window without generating a log request. Click the Clear button to remove text from all fields in the Search window.
Enter data into any or all of the fields; messages that match the criteria specified are displayed in the Log Viewer window when you click the OK button.
If you enter only a Starting Date, all messages currently stored in the database that have been generated since the beginning of that day are displayed; if you enter only an End Date, all messages currently stored in the database that were generated before the end of the specified date are displayed. The same behavior is true for each of the other fields.
Click the Cancel button to close the window without generating a log request. Click the Clear button to clear text from all of the fields in the window.
Specifies date display as Greenwich Mean Time. This is the default.
Specifies date display as local time (with respect to the GUI client).
Displays a list of Cisco IP Manager error codes, arranged by server.
Removes all data from the Log Viewer window. This has no effect on the database.
Reads all records currently into the database into the Log Viewer window, up to a maximum of 5000.
The Help menu has the following commands:
Displays information about the Cisco IP Manager software.
The Log Viewer window has the following buttons:
The Import button functions exactly the same as the "Import..." menu item of the File menu.
The Export button functions exactly the same as the "Export All" menu item of the File menu.
The Search button functions exactly the same as the "Search" menu item of the View menu.
The More Search button functions exactly the same as the "More Search" menu item of the View menu.
The Settings button functions exactly the same as the "Log Settings" menu item of the File menu.
The Purge button functions exactly the same as the "Purge By Date" menu item of the File menu.
The Refresh button functions exactly the same as the "Refresh" menu item of the View menu.
The About button functions exactly the same as the "About" menu item of the Help menu.
Posted: Mon Feb 14 14:15:13 PST 2000
Copyright 1989 - 2000©Cisco Systems Inc.