User's Manual  56  Document #: LTRT-42060 
  Mediant 2600 E-SBC 
Parameter  Description 
The valid value is a string of 8 to 40 ASCII characters, which must 
adhere to the following guidelines: 
  Include at least eight characters. 
  Include at least two letters that are upper case (e.g., A). 
  Include at least two letters that are lower case (e.g., a). 
  Include at least two numbers (e.g., 4). 
  Include at least two symbols (non-alphanumeric characters) (e.g., $, 
#, %). 
  Must contain no spaces. 
  Include at least four new characters that were not used in the 
previous password. 
Web: Status 
CLI: status 
Defines the status of the Web user. 
  New = (Default) User is required to change its password on the next 
login. When the user logs in to the Web interface, the user is 
immediately prompted to change the current password.  
  Valid = User can log in to the Web interface as normal. 
  Failed Access = This state is automatically set for users that exceed 
a user-defined number of failed login attempts, set by the 'Deny 
Access on Fail Count' parameter (see ''Configuring Web Security 
Settings'' on page 58). These users can log in only after a user-
defined timeout configured by the 'Block Duration' parameter (see 
below) or if their status is changed (to New or Valid) by a System 
Administrator or Master. 
  Old Account = This state is automatically set for users that have not 
accessed the Web interface for a user-defined number of days, set 
by the 'User Inactivity Timer' (see ''Configuring Web Security 
Settings'' on page 58). These users can only log in to the Web 
interface if their status is changed (to New or Valid) by a System 
Administrator or Master. 
Notes:  
  The Old Account status is applicable only to Admin and Monitor 
users; System Administrator and Master users can be inactive 
indefinitely. 
  For security, it is recommended to set the status of a newly added 
user to New in order to enforce password change. 
Web: Password Age  
CLI: password-age 
Defines the duration (in days) of the validity of the password. When this 
duration elapses, the user is prompted to change the password; 
otherwise, access to the Web interface is blocked. 
The valid value is 0 to 10000, where 0 means that the password is 
always valid. The default is 90. 
Web: Session Limit  
CLI: session-limit 
Defines the maximum number of concurrent Web interface sessions 
allowed for the specific user. For example, if configured to 2, the same 
user account can be logged into the device’s Web interface (i.e., same 
username-password combination) from two different management 
stations (i.e., IP addresses) at any one time. Once the user logs in, the 
session is active until the user logs off (by clicking the Log off icon on 
the toolbar) or until the session expires if the user is inactive for a user-
defined duration (see the ‘Session Timeout’ parameter below). 
The valid value is 0 to 5. The default is 2. 
Note: Up to 5 users can be concurrently logged in to the Web interface.