Security access for a switch device

1. A method comprising:

receiving a request, from a user, to implement a configuration item for a network switch appliance, the configuration item relating to a network port of the network switch appliance configured to receive packets from a network and an instrument port of the network switch appliance configured to pass received packets a network monitoring instrument;

ascertaining, by a processor, an access level associated with the user for the configuration item for the network switch appliance based on information regarding the user and access level assignment information,

wherein the access level assignment information includes a first set of access levels associated with the network port and a second set of access levels associated with the instrument port; and

authorizing or denying implementation of the configuration item based on the ascertained access level associated with the user.

2. The method of claim 1 , further comprising:

ascertaining allowable tasks associated with the determined access level.

3. The method of claim 2 , further comprising:

implementing the configuration item for the network switch appliance in response to ascertaining the request to implement the configuration item is among allowable tasks associated with the ascertained access level.

4. The method of claim 2 , further comprising:

denying implementation of the configuration item for the network switch appliance in response to ascertaining the request to implement the configuration item is not among allowable tasks associated with the determined access level.

5. The method of claim 4 , further comprising:

receiving a share access request for the user from another user;

ascertaining if the share access request is among allowable tasks associated with the another user; and

implementing the configuration item for the network switch appliance in response to ascertaining that the share access request is among allowable tasks associated with the another user.

6. The method of claim 1 , wherein ascertaining the access level associated with the user comprises looking up a table in which multiple access levels are associated with respective sets of allowable tasks.

7. The method of claim 6 , wherein the table comprises:

a first access level associated with a first set of one or more allowable tasks; and

a second access level associated with a second set of one or more allowable tasks that is different from the first set.

8. The method of claim 7 , wherein the one or more allowable tasks in the first set comprises one or a combination of: view, create tool-mirror, delete tool-mirror, edit tool port list, add map rule, delete map rule, add map, delete map, add port-pair, edit port-pair, and change port configuration.

9. The method of claim 6 , wherein ascertaining the access level associated with the user further comprises identifying which of the first and second access levels matches with the access level for the user.

10. The method of claim 1 , wherein the network switch appliance provides visibility to network parts by operating as a circuit switch.

11. The method of claim 1 , wherein the network switch appliance operates as an out-of-band device with respect to a first set of packets and an in-band device with respect to a second set of packets.

12. An apparatus, comprising:

a processor; and

a memory having instructions which, when executed by the processor, configures the processor to perform operations including:

receive a request, from a user, to implement a configuration item for a network switch appliance, the configuration item relating to a network port of the network switch appliance configured to receive packets from a network and an instrument port of the network switch appliance configured to pass received packets a network monitoring instrument;

ascertain an access level associated with the user for the configuration item for the network switch appliance based on information regarding the user and access level assignment information,

wherein the access level assignment information includes a first set of access levels associated with a network port and a second set of access levels associated with an instrument port; and

authorize or deny implementation of the configuration item based on the ascertained access level associated with the user.

13. The apparatus of claim 12 , wherein the processor is configured to ascertain whether to allow the user to implement the configuration by looking up a table in which multiple access levels are associated with respective sets of allowable tasks.

14. The apparatus of claim 13 , wherein the table comprises:

a first access level associated with a first set of one or more allowable tasks; and

a second access level associated with a second set of one or more allowable tasks that is different from the first set.

15. The apparatus of claim 14 , wherein the one or more allowable tasks in the first set comprises one or a combination of: view, create tool-mirror, delete tool-mirror, edit tool port list, add map rule, delete map rule, add map, delete map, add port-pair, edit port-pair, and change port configuration.

16. The apparatus of claim 14 , wherein the processor is configured to ascertain whether to allow the user to implement the configuration by identifying which of the first and second access levels matches with the access level for the user.

17. The apparatus of claim 12 , wherein the processor is communicatively coupled to the network switch appliance.

18. The apparatus of claim 12 , wherein the configuration item is associated with a configuration of the network switch appliance.

19. The apparatus of claim 12 , wherein the configuration item comprises a parameter for configuring the network switch appliance.

20. The apparatus of claim 12 , wherein the processor is further configured to enable a user to select one of a plurality of transmission schemes for transmitting the packets between a plurality of network ports and a plurality of instrument ports of the network switch appliance.

21. The apparatus of claim 20 , wherein the one of the plurality of transmission schemes includes transmitting the packets between the network ports and the instrument ports using any of one-to-one transmission scheme, one-to-many transmission scheme, many-to-one transmission scheme, or many-to-many transmission scheme.