Table of Contents
Advertisement
User authentication
4. Save the configuration and apply the change
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.
Configure a local user
Required configuration items
A username.
n
A password. The password must be at least eight characters long and must contain at least one
n
uppercase letter, one lowercase letter, one number, and one special character. For security
reasons, passwords are stored in hash form. There is no way to get or display passwords in
clear-text form, although prior to saving the configuration, the password can be shown by
clicking Reveal.
Note
If the
long and must contain at least one uppercase letter, one lowercase letter, one number, and
one special character.
n
The authentication group or groups from which the user will inherit access rights. See
Authentication groups
Additional configuration items
n
An alias for the user. Because the username cannot contain any special characters, such as
hyphens (-) or periods (.), an alias allows the user to log in using a name that contains special
characters.
The number of unsuccessful login attempts before the user is locked out of the system.
n
The amount of time that the user is locked out of the system after the specified number of
n
unsuccessful login attempts.
An optional public ssh key, to authenticate the user when using passwordless SSH login.
n
Two-factor authentication information for user login over SSH, telnet, and the serial console:
n
The verification type for two-factor authentication: Either time-based or counter-based.
l
The security key.
l
Whether to allow passcode reuse (time based verification only).
l
The passcode refresh interval (time based verification only).
l
The valid code window size.
l
The login limit.
l
The login limit period.
l
One-time use eight-digit emergency scratch codes.
l
To configure a local user:
IX20 User Guide
Primary Responder feature
for information about configuring groups.
is enabled, the password must be at least 10 characters
Local users
884
Advertisement
Table of Contents
