Table of Contents
Advertisement
The following displays an IPv4 CPM filter configuration example:
A:ALU-49>config>sys>sec>cpm>ip-filter# info
----------------------------------------------
----------------------------------------------
A:ALU-49>config>sys>sec>cpm>ip-filter#
Configuring Password Management Parameters
Configuring password management parameters consists of defining aging, the authentication
order and authentication methods, password length and complexity, as well as the number of
attempts a user can make to enter a password.
Depending on the authentication requirements, password parameters are configured locally
or on the RADIUS or TACACS+ server.
Use the following CLI commands to configure password support:
CLI Syntax:
7705 SAR OS System Management Guide
match [next-header next-header]
renum old-entry-id new-entry-id
entry 10 create
action drop
description "CPM-Filter 10.4.101.2 #101"
log 101
exit
entry 20 create
no action
description "CPM-Filter 10.4.101.2 #201"
log 101
exit
no shutdown
config>system>security
password
admin-password password [hash | hash2]
aging days
attempts count [time minutes1] [lockout
minutes2]
dscp dscp-name
dst-ip ipv6-address/prefix-length
dst-port [tcp/udp port-number] [mask]
icmp-code icmp-code
icmp-type icmp-type
src-ip ipv6-address/prefix-length
src-port src-port-number [mask]
tcp-ack {true | false}
tcp-syn {true | false}
Security
47
Advertisement
Table of Contents
