3Com SuperStack 4 Configuration Manual page 266

278 C 11: 802.1
HAPTER
Disconnecting a User by
Force
C
X ONFIGURATION
Setting the Attributes of Local Users
Perform the following configurations in Local User View.
Table 311 Setting/Removing the Attributes Concerned with a Specified User
Operation
Set a password for a specified user
Remove the password set for the
specified user
Set the state of the specified user
Set a priority level for the user
Restore the default priority level
Set a service type for the specified
user
Cancel the service type of the
specified user
Configure the attributes of
lan-access users
Remove the attributes defined for
the lan-access users
Note the following two items when you configure these service types: SSH, Telnet
or Terminal.
When you configure a new service type for a user, the system adds the
■
requested service-type to any existing configuration. For example, if the user
previously had just Telnet access, and SSH was added, the user would now
have access to bothTelnet and SSH.
You can set user level when you configure a service type. If you set multiple
■
service types and specify the user levels, then only the last configured user level
is valid. Some of the service types allow a user-priviledge level to be entered as
an optional extra parameter. For example Telnet, Terminal & SSH.
However, the user-priviledge level is a global value for all service types. Entering
the following two commands will result in the user having a level of 3 for all
service types. In this case both telnet and SSH:
[5500-luser-adminpwd]service-type telnet level 1
[5500-luser-adminpwd]service-type ssh level 3
You can use either
local user. If both of these two commands are used, the latest configuration will
take effect.
Sometimes it is necessary to disconnect a user or a category of users by force. The
system provides the following command to serve this purpose.
Perform the following configurations in System View.
Command
password { simple | cipher }
undo password
state { active | block }
level
level
undo level
service-type { ftp [ ftp-directory
directory
telnet | terminal }* }
undo service-type { ftp [ ftp-directory
] | lan-access | { ssh | telnet |
terminal }* [ level
attribute { ip
mac_address
access-limit
vlanid
portnum
port
undo attribute { ip | mac | idle-cut |
access-limit | vlan | location }*
or
level service-type
] | lan-access | { ssh |
level
ip_address
| idle-cut second
max_user_number
| location { nas-ip
portnum
| port
command to specify the level for a
password
] }
| mac
|
| vlan
ip_address
} }*