HPE FlexNetwork 10500 Series Security Configuration Manual page 40

Step
3. (Optional.) Configure
a password for the
local user.
4. (Optional.) Configure
a description for the
local user.
5. Assign services to the
local user.
6. (Optional.) Place the
local user to the active
or blocked state.
7. (Optional.) Set the
upper limit of
concurrent logins
using the local user
name.
8. (Optional.) Configure
binding attributes for
the local user.
9. (Optional.) Configure
authorization
attributes for the local
user.
Command
•
For a network access user:
password { cipher | simple }
string
•
For a device management
user:
In non-FIPS mode:

password [ { hash |
simple } string ]
In FIPS mode:

password
description text
•
For a network access user:
service-type { lan-access |
portal }
•
For a device management
user:
In non-FIPS mode:

service-type { ftp | { http |
https | ssh | telnet |
terminal } * }
In FIPS mode:

service-type { https | ssh
| terminal } *
state { active | block }
access-limit max-user-number
bind-attribute { ip ip-address |
location interface interface-type
interface-number | mac
mac-address | vlan vlan-id } *
authorization-attribute { acl
acl-number | idle-cut minutes |
ip-pool ipv4-pool-name |
ipv6-pool ipv6-pool-name |
session-timeout minutes |
user-role role-name | vlan vlan-id |
work-directory directory-name } *
23
Remarks
The default settings are as follows:
•
In non-FIPS mode, no password is
configured for a local user. A local
user can pass authentication after
entering the correct username and
passing attribute checks.
•
In FIPS mode, no password is
configured for a local user. A local
user cannot pass authentication.
By default, no description is configured
for a local user.
You can configure descriptions only for
network access users.
By default, no services are authorized to
a local user.
By default, a local user is in active state
and can request network services.
By default, the number of concurrent
logins is not limited for the local user.
This command takes effect only when
local accounting is configured for the
local user. It does not apply to FTP,
SFTP, or SCP users, who do not
support accounting.
By default, no binding attributes are
configured for a local user.
The following default settings apply:
•
The working directory for FTP,
SFTP, and SCP users is the root
directory of the NAS. However, the
users do not have permission to
access the root directory.
•
The network-operator user role is
assigned to local users that are
created by a network-admin or
level-15 user on the default MDC.
•
The mdc-operator user role is
assigned to local users that are
created by an mdc-admin or
level-15 user on a non-default
MDC.