Checking User Security Management - Zte ZXR10 5900E Series Routine Maintenance

ZXR10 5900E Series Routine Maintenance

5.2 Checking User Security Management

Purpose
This topic describes how to check user security management to ensure that the equipment
operation environment is secure.
Steps
1. Change the user passwords.
2. Change the enable passwords.
Reference Standards
1. Enter the config-system-user mode and run the username xxx password command to
modify the user passwords.
Generally, it is recommended to change the user passwords once every 3-6 months.
It is recommended to set a password with at least 6 characters. The password should
contain at least two of the following types: number, lowercase, uppercase and special
character.
For example:
ZXR10(config)#system-user
ZXR10(config-system-user)#user-name xxx
ZXR10(config-system-user-username)#password xxxxxxx
ZXR10(config-system-user-username)#bind authentication-template 1
ZXR10(config-system-user-username)#bind authorization-template 1
ZXR10(config-system-user-username)#exit
ZXR10(config-system-user)#authentication-template 1
ZXR10(config-system-user-authen-temp)#bind aaa-authentication-template 2001
ZXR10(config-system-user-authen-temp)#exit
ZXR10(config-system-user)#authorization-template 1
ZXR10(config-system-user-author-temp)#bind aaa-authorization-template 2001
ZXR10(config-system-user-author-temp)#local-privilege-level 15
ZXR10(config-system-user-author-temp)#exit
2. In global configuration mode, run the enable secret level command to modify the enable
passwords at different right levels.
Generally, it is recommended to use enable passwords that are different from the user
passwords.
It is recommended to set an enable password with at least 6 characters. The password
should contain at least two of the following types: number, lowercase, uppercase and
special character.
For example:
SJ-20150114102049-013|2015-01-15 (R1.0)
5-2
ZTE Proprietary and Confidential