Digi IX10 User Manual page 389

User authentication
a. For Lockout tries, type the number of unsuccessful login attempts before the user is
locked out of the device. The default is 5.
b. For Lockout duration, type the amount of time that the user is locked out after the
number of unsuccessful login attempts defined in Lockout tries.
Allowed values are any number of minutes, or seconds, and take the format number{m|s}.
For example, to set Lockout duration to ten minutes, enter 10m or 600s.
The minimum value is 1 second, and the maximum is 15 minutes. The default is 15 minutes.
7. Add groups for the user.
Groups define user access rights. See
groups.
a. Click to expand Groups.
b. For Add Group, click .
c. For Group, select an appropriate group.
Note Every user must be configured with at least one group. You can add multiple groups to a
user by clicking Add again and selecting the next group.
8. (Optional) Add SSH keys for the user to use passwordless SSH login:
a. Click SSH keys.
b. In Add SSH key, paste or type a public encryption key that this user can use for
passwordless SSH login and click .
9. (Optional) Configure two-factor authentication for SSH, telnet, and serial console login:
a. Click Two-factor authentication.
b. Check Enable to enable two-factor authentication for this user.
c. Select the Verification type:
n
n
IX10 User Guide
Time-based (TOTP): Time-based One-Time Password (TOTP) authentication uses
the current time to generate a one-time password.
Counter-based (HOTP): HMAC-based One-Time Password (HOTP) uses a counter
to validate a one-time password.
Authentication groups for information about configuring
Local users
389