Table of Contents
Advertisement
User authentication
4. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.
Configure a local user
Required configuration items
A username.
n
A password. The password must be at least eight characters long and must contain at least
n
one uppercase letter, one lowercase letter, one number, and one special character. For
security reasons, passwords are stored in hash form. There is no way to get or display
passwords in clear-text form, although prior to saving the configuration, the password can be
shown by clicking Reveal.
The authentication group or groups from which the user will inherit access rights. See
n
Authentication groups
Additional configuration items
An alias for the user. Because the username cannot contain any special characters, such as
n
hyphens (-) or periods (.), an alias allows the user to log in using a name that contains special
characters.
The number of unsuccessful login attempts before the user is locked out of the system.
n
The amount of time that the user is locked out of the system after the specified number of
n
unsuccessful login attempts.
An optional public ssh key, to authenticate the user when using passwordless SSH login.
n
Two-factor authentication information for user login over SSH, telnet, and the serial console:
n
The verification type for two-factor authentication: Either time-based or counter-based.
l
The security key.
l
Whether to allow passcode reuse (time based verification only).
l
The passcode refresh interval (time based verification only).
l
The valid code window size.
l
The login limit.
l
The login limit period.
l
One-time use eight-digit emergency scratch codes.
l
To configure a local user:
Web
IX10 User Guide
for information about configuring groups.
Local users
603
Advertisement
Table of Contents
