HP 3600 v2 Series Security Configuration Manual page 28

create a guest account and specify a validity time and an expiration time for the account to control the
validity of the account.
User group
•
Each local user belongs to a local user group and bears all attributes of the group, such as the
authorization attributes. For more information about local user group, see
attributes."
Binding attributes
•
Binding attributes are used to control the scope of users. They are checked during local authentication of
a user. If the attributes of a user do not match the binding attributes configured for the local user account,
the user cannot pass authentication. Binding attributes include the ISDN calling number, IP address,
access port, MAC address, and native VLAN. For more information about binding attributes, see
"Configuring local user
a local user.
Authorization attributes
•
Authorization attributes indicate the rights that a user has after passing local authentication.
Authorization attributes include the ACL, PPP callback number, idle cut function, user level, user role, user
profile, VLAN, and FTP/SFTP work directory. For more information about authorization attributes, see
"Configuring local user
Every configurable authorization attribute has its definite application environments and purposes. When
you configure authorization attributes for a local user, consider which attributes are needed and which
are not.
You can configure an authorization attribute in user group view or local user view to make the attribute
effective for all local users in the group or only for the local user. The setting of an authorization attribute
in local user view takes precedence over that in user group view.
Local user configuration task list
Task
Configuring local user attributes
Configuring user group attributes
Displaying and maintaining local users and local user groups
Configuring local user attributes
Follow these steps to configure attributes for a local user:
To do...
Enter system view
Set the password display mode for
all local users
Add a local user and enter local
user view
attributes." Be cautious when deciding which binding attributes to configure for
attributes."
Use the command...
system-view
local-user
password-display-mode { auto
| cipher-force }
local-user user-name
17
"Configuring user group
Remarks
Required
Optional
Optional
Remarks
—
Optional
auto by default, indicating to display
the password of a local user in the way
defined by the password command.
Required
No local user exists by default.