HP FlexFabric 5700 Series Security Configuration Manual page 32

Step
3. (Optional.) Configure a
password for the local
user.
4. Assign services to the local
user.
5. (Optional.) Place the local
user to the active or
blocked state.
6. (Optional.) Set the upper
limit of concurrent logins
using the local user name.
7. (Optional.) Configure
binding attributes for the
local user.
Command
•
For a network access user:
password { cipher | simple }
password
•
For a device management user:
In non-FIPS mode:
password [ { hash | simple }
password ]
In FIPS mode:
password
•
For a network access user:
service-type { lan-access |
portal }
•
For a device management user:
In non-FIPS mode:
service-type { ftp | { http |
https | ssh | telnet |
terminal } * }
In FIPS mode:
service-type { https | ssh |
terminal } *
state { active | block }
access-limit max-user-number
bind-attribute { ip ip-address |
location interface interface-type
interface-number | mac
mac-address | vlan vlan-id } *
20
Remarks
Network access user passwords are
encrypted with the encryption
algorithm and saved in ciphertext.
Device management user passwords
are encrypted with the hash
algorithm and saved in ciphertext.
In non-FIPS mode, a
non-password-protected user passes
authentication if the user provides the
correct username and passes
attribute checks. To enhance security,
configure a password for each local
user.
In FIPS mode, only
password-protected users can pass
authentication.
By default, no service is authorized to
a local user.
By default, a created local user is in
active state and can request network
services.
By default, the number of concurrent
logins is not limited for the local user.
This command takes effect only when
local accounting is configured for the
local user. It does not apply to FTP,
SFTP, or SCP users, who do not
support accounting.
By default, no binding attribute is
configured for a local user.
Binding attribute ip applies only to
LAN users using 802.1X.
Binding attributes location, mac, and
vlan apply only to LAN and portal
users.