Configuring Local-User Administrative Users; Verifying Local-User Configuration; Updating Local-User Database - Cisco ASR 5500 System Administration Manual

System Settings

Configuring Local-User Administrative Users

The local user type supports ANSI T1.276-2003 password security protection. Local-user account information,
such as passwords, password history, and lockout states, is maintained in /flash. This information is saved
immediately in a separate local user database subject to AAA based authentication and is not used by the rest
of the system. As such, configured local-user accounts are not visible with the rest of the system configuration.
Important
Use the example below to configure local-user administrative users:
configure
local-user username name
end
Notes:
• Additional keyword options are available identify active administrators or place time thresholds on the
For additional information on the local-user database, see
on page

Verifying Local-User Configuration

Verify that the configuration was successful by entering the following command:
show local-user verbose
This command displays information on configured local-user administrative users. A sample output for this
command appears below. In this example, a local-user named SAUser was configured.
Username:
Auth Level:
Last Login:
Login Failures:
Password Expired:
Locked:
Suspended:
Lockout on Pw Aging:
Lockout on Login Fail: Yes

Updating Local-User Database

Update the local-user (administrative) configuration by running the following Exec mode command. This
command should be run immediately after creating, removing or editing administrative users.
update local-user database
In release 20.0 and higher Trusted StarOS builds, the local user database is disabled. The Global
Configuration mode local-user commands, and Exec mode show local-user and update local-user
commands are unavailable. For additional information on Trusted builds, see the System Operation and
Configuration chapter.
administrator. Refer to the Command Line Interface Reference for more information about the local-user
username command.
38.
SAUser
secadmin
Never
0
Yes
No
No
Yes
Configuring Local-User Administrative Users
Updating and Downgrading the local-user Database,
ASR 5500 System Administration Guide, StarOS Release 21.5
37