Configuring First-Login Password Modification; Figure 4-7 Configuring First-Login Password Modification - Zte ZXR10 ZSR V2 Configuration Manual (System Management

Chapter 4 User Management

4.3.7 Configuring First-Login Password Modification

Configuration Description
As shown in Figure 4-7, a user logs in to the ZXR10 ZSR V2 from a PC through a serial
port or Telnet. The user enters configuration mode to create another user, and configures
once-password (only valid for locally authenticated users). During the next login, the user
can use the self-configured password. The default range of a password is 3–32 characters.

Figure 4-7 Configuring First-Login Password Modification

Configuration Flow
1. Create a user.
2. Configure an authentication template.
3. Configure an authorization template.
4. Configure the first login password modification function.
5. During login, the user can set a password. The next time, the user can use the new
password to successfully log in.
Configuration Commands
Run the following commands on the ZXR10 ZSR V2:
R1(config)#system-user
R1(config-system-user)#authentication-template 1
R1(config-system-user-authen-temp)#bind aaa-authentication-template 2001
R1(config-system-user-authen-temp)#exit
R1(config-system-user)#authorization-template 1
R1(config-system-user-author-temp)#bind aaa-authorization-template 2001
R1(config-system-user-author-temp)#local-privilege-level 15
R1(config-system-user-author-temp)#exit
R1(config-system-user)#user-name zte
R1(config-system-user-username)#bind authentication-template 1
R1(config-system-user-username)#bind authorization-templat 1
R1(config-system-user-username)#password zte
R1(config-system-user-username)#once-password /*Configures first-login
password modification.*/
R1(config-system-user-username)#exit
R1(config-system-user)#exit
R1(config)#aaa-authentication-template 2001
R1(config-aaa-authen-template)#aaa-authentication-type local
4-17
SJ-20140504150128-007|2014-05-10 (R1.0) ZTE Proprietary and Confidential