GE C30 Instruction Manual page 130

5.2 PRODUCT SETUP
The Supervisory menu settings are available for Supervisor role only or if the Supervisor role is disabled then for the
Administrator role only.
5
Local Authentication: This setting is enabled by default, meaning "Yes" is selected. When enabled, Device Authentication
with roles is enabled. When this setting is disabled, the UR only authenticates to the AAA server (Radius). However, the
Administrator and Supervisor (when enabled) remain active even after device authentication is disabled and their only per-
mission is to re-enable device authentication. To re-enable device authentication, the Supervisor unlocks the device for set-
ting changes, then the Administrator re-enables device authentication.
Bypass Access: Enabling this setting allows 502 Ethernet sessions to the relay. The serial ports (RS232 and RS485) allow
settings write. No passwords or roles are required when in this mode. When disabled, everything goes back to normal. This
setting has no effect on the front panel and it continues to support Role Based Access Control (RBAC).
MODE
Bypass Access = Disabled
Bypass Access = Enabled
Lock Relay: This setting uses a Boolean value (Enable/Disable) to indicate if the device accepts setting changes and
whether the device can receive a firmware upgrade. This setting can be changed only by the Supervisor role, if it is enabled
or by the Administrator if the Supervisor role is disabled. The Supervisor role enables this setting for the relay to start
accepting setting changes or command changes or firmware upgrade. After all the setting changes are applied or com-
mands executed, the Supervisor disables to lock setting changes.
Example: If this setting is "Yes" and an attempt is made to change settings or upgrade the firmware, the UR device denies
the setting changes and denies upgrading the firmware. If this setting is "No", the UR device accepts setting changes and
firmware upgrade.
This role is disabled by default.
5-14
Figure 5–1: SUPERVISORY PANEL
SERIAL (RS232 & RS485)
Local Authentication
and Role Based Access
Control (RBAC)
and passwords in clear
No Role Based Access Control
(RBAC)
and no passwords
C30 Controller System
502 ETHERNET SSH ETHERNET
Read only Local/Remote Authentication
and Role Based Access Control (RBAC)
and passwords encrypted
No Role Based Access Local/Remote Authentication
Control (RBAC) and Role Based Access Control (RBAC)
and no passwords and passwords encrypted
5 SETTINGS
GE Multilin