HP VSR1000 Security Configuration Manual page 31

Step
8. (Optional.) Configure
authorization attributes for
the local user.
9. (Optional.) Configure
password control attributes
for the local user.
10. (Optional.) Assign the
local user to a user group.
Command
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute |
user-role role-name | vlan vlan-id |
work-directory directory-name } *
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password
length:
password-control length length
•
Configure the password
composition policy:
password-control composition
type-number type-number
[ type-length type-length ]
•
Configure the password
complexity checking policy:
password-control complexity
{ same-character | user-name }
check
•
Configure the maximum login
attempts and the action to take if
there is a login failure:
password-control login-attempt
login-times [ exceed { lock |
lock-time time | unlock } ]
group group-name
21
Remarks
The following default settings apply:
•
The ACL, idle timeout period, and
VLAN authorization attributes are
not configured for local users.
•
FTP, SFTP, and SCP users have the
root directory of the NAS set as
the working directory. However,
the users do not have permission
to access the root directory.
•
The network-operator user role is
assigned to local users that are
created by a network-admin or
level- 1 5 user.
For PPP users, only the settings for acl,
callback-number, and idle-cut take
effect.
For portal users, only the settings for
acl, idle-cut, and vlan take effect.
For Telnet and terminal users, only
the setting for user-role takes effect.
For SSH and FTP users, only the
settings for user-role and
work-directory take effect.
For other types of local users, no
authorization attribute takes effect.
By default, the local user uses
password control attributes of the
user group to which the local user
belongs.
Only device management users
support the password control
attributes.
By default, a local user belongs to the
default user group system.