AudioCodes Mediant 4000 SBC User Manual page 73

User's Manual
Parameter
Security
Password Age
password-age
[WebUsers_PwAgeInterval]
Web Session Limit
session-limit
[WebUsers_SessionLimit]
CLI Session Limit
cli-session-limit
[WebUsers_CliSessionLimit]
Web Session Timeout
session-timeout
[WebUsers_SessionTimeout]
Version 7.2

Inactivity = The state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see 'Configuring Web Session and
Access Settings' on page 75). These users can only log in to the
Web interface if their status is changed (to New or Valid) by a
System Administrator or Master.
Note:

The Inactivity status is applicable only to Administrator and Monitor
users; Security Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Defines the duration (in days) of the validity of the password. When
the duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Defines the maximum number of concurrent Web interface and REST
sessions allowed for the specific user account. For example, if
configured to 2, the user account can be logged into the device's Web
interface (i.e., same username-password combination) from two
different management stations (i.e., IP addresses) or Web browsers at
the same time.
Once the user logs in, the session is active until the user logs off or
until the session expires if the user is inactive for a user-defined
duration (see the 'Web Session Timeout' parameter below).
The valid value is 0 to 5. The default is 2.
Note: If the number of concurrently logged-in users is at the
configured maximum, the device allows an additional user to log in
through REST.
Defines the maximum number of concurrent CLI sessions allowed for
the specific user. For example, if configured to 2, the same user
account can be logged into the device's CLI (i.e., same username-
password combination) from two different management stations (i.e.,
IP addresses) at any one time. Once the user logs in, the session is
active until the user logs off or until the session expires if the user is
inactive for a user-defined duration (see the 'Web Session Timeout'
parameter below).
The valid value is -1, or 0 to 100. The default is -1, which means that
the limit is according to the global parameters, 'Maximum Telnet
Sessions' (TelnetMaxSessions) or 'Maximum SSH Sessions'
(SSHMaxSessions).
Defines the duration (in minutes) of inactivity of a logged-in user in the
Web interface, after which the user is automatically logged off the
Web session. In other words, the session expires when the user has
not performed any operations (activities) in the Web interface for the
configured timeout duration.
The valid value is 0, or 2 to 100000. A value of 0 means no timeout.
The default value is according to the settings of the
73
6. Web-Based Management
Description
Mediant 4000 SBC