AudioCodes Mediant 800B User Manual page 68

Parameter
Security
Password Age
password-age
Session Limit
session-limit
Session Timeout
session-timeout
Block Duration
block-duration
User's Manual

Valid = User can log in to the Web interface as normal.

Failed Login = The state is automatically set for users that exceed a
user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see 'Configuring Web Session
and Access Settings' on page 70). These users can log in only after
a user-defined timeout configured by the 'Block Duration' parameter
(see below) or if their status is changed (to New or Valid) by a
Security Administrator or Master.

Inactivity = The state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see 'Configuring Web Session and
Access Settings' on page 70). These users can only log in to the
Web interface if their status is changed (to New or Valid) by a
System Administrator or Master.
Note:

The Inactivity status is applicable only to Administrator and Monitor
users; Security Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Defines the duration (in days) of the validity of the password. When the
duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Defines the maximum number of concurrent Web interface sessions
allowed for the specific user. For example, if configured to 2, the same
user account can be logged into the device's Web interface (i.e., same
username-password combination) from two different management
stations (i.e., IP addresses) at any one time. Once the user logs in, the
session is active until the user logs off (by clicking the Log off icon on
the toolbar) or until the session expires if the user is inactive for a user-
defined duration (see the 'Session Timeout' parameter below).
The valid value is 0 to 5. The default is 2.
Note: Up to five users can be concurrently logged in to the Web
interface.
Defines the duration (in minutes) of inactivity of a logged-in user in the
Web interface, after which the user is automatically logged off the Web
session. In other words, the session expires when the user has not
performed any operations (activities) in the Web interface for the
configured timeout duration.
The valid value is 0 to 100000. A value of 0 means no timeout. The
default value is according to the settings of the WebSessionTimeout
global parameter (see 'Configuring Web Session and Access Settings'
on page 70).
Defines the duration (in seconds) for which the user is blocked when
the user exceeds a user-defined number of failed login attempts.
The valid value is 0 to 100000, where 0 means that the user can do as
many login failures without getting blocked. The default is according to
the settings of the 'Deny Authentication Timer' parameter (see
68
Mediant 800B Gateway & E-SBC
Description
Document #: LTRT-10298