Nortel 3050 Command Reference Manual page 220

220 Command Reference
Table 73
Local database Menu Options (/cfg/vpn/aaa/auth/local) (cont'd.)
Command Syntax and Usage
passwd <user> <new password>
groups <user> <desired group names>
del <user by name>
list
Copyright © 2007 Nortel Networks
.
Adds a user to the local authentication database. You need to provide
the user name and password for the user, as well as the group(s) in
which the user is a member. The user name must be unique. When the
user attempts to log in to the VPN and local database authentication
is applied, the user is prompted for the user name and password you
define here.
The group name is used for authorization, controlling access to
resources by checking the specified group name against one or more
access rules associated with the group. The group name you specify
when adding a user must therefore exist in the current VPN, along with
one or more access rules valid for the group.
To view which group names and associated access rules that are
currently defined in the VPN, use the /cfg/vpn #/aaa/cur group
command.
Note: If a user is authenticated by an external authentication server
(for example RADIUS or LDAP), and that server cannot be configured
to return a list of group names upon authentication, the local database
can be used for authorization only. To achieve such a "division of labor",
provide the user name and group name(s) when prompted, but substitute
the actual password for the specified user name with an asterisk (*).
Example from CLI session:
>> Local database# add
Enter user name: john
Enter passwd: [press enter to leave unchanged] *
Enter group names (comma separated): staff
For instructions on how to configure the VPN Gateway to perform
external database authentication in conjunction with local database
authorization, see the groupauth command on
Settings Menu Options (/cfg/vpn/aaa/auth/adv)" (page
Lets you change the password for an existing user.
Lets you change the groups list for an existing user.
Deletes the specified user from the local user database.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
Table 77 "Advanced
226).