HP 3600 v2 Series Security Configuration Manual page 29

To do...
Configure a password for the local
user
Specify the service types for the
local user
Place the local user to the state of
active or blocked
Set the maximum number of
concurrent users of the local user
account
Configure the binding attributes for
the local user
Configure the authorization
attributes for the local user
Use the command...
password [ { cipher | simple }
password ]
service-type { ftp | lan-access |
{ ssh | telnet | terminal } * |
portal | web }
state { active | block }
access-limit max-user-number
bind-attribute { call-number
call-number [ : subcall-number ]
| ip ip-address | location port
slot-number subslot-number
port-number | mac
mac-address | vlan vlan-id } *
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut
minute | level level |
user-profile profile-name |
user-role { guest |
guest-manager |
security-audit } | vlan vlan-id |
work-directory
directory-name } *
18
Remarks
Optional
If you do not configure any password
for a local user, the local user does not
need to provide any password during
authentication, and can pass
authentication after entering the
correct local user name and passing
attribute checks. To achieve higher
security, configure a password for
each local user.
If you specify no keyword or argument,
the command will prompt you to
provide a password.
Required
By default, no service is authorized to a
local user.
Optional
When created, a local user is in active
state by default, and the user can
request network services.
Optional
By default, there is no limit to the
maximum number of concurrent users
of a local user account.
The limit is effective only for local
accounting, and is not effective for FTP
users.
Optional
By default, no binding attribute is
configured for a local user.
Binding attributes are only intended for
and LAN users.
Optional
By default, no authorization attribute is
configured for a local user.
For LAN and portal users, only acl,
idle-cut, user-profile, and vlan are
supported.
For SSH, terminal, and web users, only
level is supported.
For FTP users, only level and
work-directory are supported.
For Telnet users, only level and
user-role is supported.
For other types of local users, no
binding attribute is supported.