Cisco ONS 15454 DWDM Installation And Operation Manual page 574

DLP-G189 Change Security Policy for Multiple Nodes
Step 5 In the User Lockout area, you can modify the following:
Failed Logins Before Lockout—The number of failed login attempts a user can make before the user
•
is locked out from the node. You can choose a value between 0 and 10.
• Manual Unlock by Superuser—Allows a user with Superuser privileges to manually unlock a user
who has been locked out from a node.
Lockout Duration—Sets the amount of time the user will be locked out after a failed login. You can
•
choose a value between 0 and 10 minutes, and 0 and 55 seconds (in five-second intervals).
Note
In the Password Change area, you can modify the following:
Step 6
Prevent Reusing Last [ ] Passwords—Choose a value between 1 and 10 to set the number of different
•
passwords that the user must create before they can reuse a password.
• New Password must Differ from the Old Password—Choose the number of characters that must
differ between the old and new password. The default number is 1. The range is 1 to 5.
• Cannot Change New Password for [ ] days—If checked, prevents users from changing their
password for the specified period. The range is 20 to 95 days.
Require Password Change on First Login to New Account—If checked, requires users to change
•
their password the first time they log into their account.
To require users to change their password at periodic intervals, check the Enforce Password Aging check
Step 7
box in the Password Aging area. If checked, provision the following parameters:
Aging Period—Sets the amount of time that must pass before the user must change his or her
•
password for each security level: RETRIEVE, MAINTENANCE, PROVISIONING, and
SUPERUSER. The range is 20 to 95 days.
Warning Period—Sets the number days the user will be warned to change his or her password for
•
each security level. The range is 2 to 20 days.
In the Other area, you can provision the following:
Step 8
Single Session Per User—If checked, limits users to one login session at one time.
•
Disable Inactive User—If checked, disables users who do not log into the node for the period of time
•
specified in the Inactive Duration box. The Inactive Duration range is 1 to 99 days.
In the Select Applicable Nodes area, uncheck any nodes where you do not want to apply the changes.
Step 9
Click OK.
Step 10
In the Security Policy Change Results dialog box, confirm that the changes are correct, then click OK.
Step 11
Return to your originating procedure (NTP).
Step 12
Cisco ONS 15454 DWDM Installation and Operations Guide, R6.0
10-48
Manual Unlock by Superuser and Lockout Duration are mutually exclusive.
Chapter 10 Manage the Node
September 2005