Table of Contents
Advertisement
User authentication
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Add a user. For example, to create a user named new_user:
(config)> add auth user new_user
(config auth user new_user)>
The user is enabled by default. To disable the user, type:
(config auth user new_user)> enable false
(config auth user new_user)>
4. (Optional) Create a username alias for the user.
Because the name to create the user cannot contain special characters such as hyphens (-) or
periods (.), an alias allows the user to log in using a name that contains special characters. For
security purposes, if two users have the same alias, the alias will be disabled.
(config auth user new_user> username username_alias
(config auth user new_user)>
5. Set the user's password. The password must be at least eight characters long and must
contain at least one uppercase letter, one lowercase letter, one number, and one special
character.
(config auth user new_user> password pwd
(config auth user new_user)>
6. Configure login failure lockout settings:
The login failure lockout feature is enabled by default. To disable:
(config auth user new_user> lockout enable false
(config auth user new_user)>
a. Set the number of unsuccessful login attempts before the user is locked out of the device.
where value is any integer. The minimum value is 1, and the default value is 5.
b. Set the amount of time that the user is locked out after the number of unsuccessful login
attempts defined in lockout tries:
(config auth user new_user> lockout duration value
(config auth user new_user)>
where value is any number of minutes, or seconds, and takes the format number{m|s}.
For example, to set duration to ten minutes, enter either 10m or 600s:
IX30 User Guide
Local users
717
Advertisement
Table of Contents
