AudioCodes Mediant 4000 SBC User Manual page 61

User's Manual
Parameter
Status
status
Security
Password Age
password-age
Session Limit
session-limit
Version 7.2

Master = Read/write privileges for all pages. This user also functions
as a security administrator.
Note:

At least one Security Administrator must exist. You cannot delete
the last remaining Security Administrator.

The first Master user can be added only by a Security Administrator
user.

Additional Master users can be added, edited and deleted only by
Master users.

If only one Master user exists, it can be deleted only by itself.

Master users can add, edit, and delete Security Administrators
(except the last Security Administrator).

Only Security Administrator and Master users can add, edit, and
delete Administrator and Monitor users.
Defines the status of the user.

New = (Default) User is required to change its password on the next
login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.

Valid = User can log in to the Web interface as normal.

Failed Login = The state is automatically set for users that exceed a
user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see ''Configuring Web Session
and Access Settings'' on page 63). These users can log in only after
a user-defined timeout configured by the 'Block Duration' parameter
(see below) or if their status is changed (to New or Valid) by a
Security Administrator or Master.

Inactivity = The state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see ''Configuring Web Session and
Access Settings'' on page 63). These users can only log in to the
Web interface if their status is changed (to New or Valid) by a
System Administrator or Master.
Note:

The Inactivity status is applicable only to Administrator and Monitor
users; Security Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Defines the duration (in days) of the validity of the password. When the
duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Defines the maximum number of concurrent Web interface sessions
allowed for the specific user. For example, if configured to 2, the same
user account can be logged into the device's Web interface (i.e., same
username-password combination) from two different management
stations (i.e., IP addresses) at any one time. Once the user logs in, the
session is active until the user logs off (by clicking the Log off icon on
61
6. Web-Based Management
Description
Mediant 4000 SBC