User's Manual 8. Web-Based Management
Version 6.8 69 Mediant 500L MSBR
Parameter Description
Web: Status
CLI: status
Defines the status of the Web user.
New = (Default) User is required to change its password on the next
login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.
Valid = User can log in to the Web interface as normal.
Failed Access = This state is automatically set for users that exceed
a user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see ''Configuring Web Security
Settings'' on page 71). These users can log in only after a user-
defined timeout configured by the 'Block Duration' parameter (see
below) or if their status is changed (to New or Valid) by a System
Administrator or Master.
Old Account = This state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see ''Configuring Web Security
Settings'' on page 71). These users can only log in to the Web
interface if their status is changed (to New or Valid) by a System
Administrator or Master.
Notes:
The Old Account status is applicable only to Admin and Monitor
users; System Administrator and Master users can be inactive
indefinitely.
For security, it is recommended to set the status of a newly added
user to New in order to enforce password change.
Web: Password Age
CLI: password-age
Defines the duration (in days) of the validity of the password. When this
duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Web: Session Limit
CLI: session-limit
Defines the maximum number of concurrent Web interface sessions
allowed for the specific user. For example, if configured to 2, the same
user account can be logged into the device’s Web interface (i.e., same
username-password combination) from two different management
stations (i.e., IP addresses) at any one time. Once the user logs in, the
session is active until the user logs off (by clicking the Log off icon on
the toolbar) or until the session expires if the user is inactive for a user-
defined duration (see the ‘Session Timeout’ parameter below).
The valid value is 0 to 5. The default is 2.
Note: Up to 5 users can be concurrently logged in to the Web interface.
Web: Session Timeout
CLI: session-timeout
Defines the duration (in minutes) of inactivity of a logged-in user in the
Web interface, after which the the user is automatically logged off the
Web session. In other words, the session expires when the user has
not performed any operations (activities) in the Web interface for the
configured timeout duration.
The valid value is 0 to 100000. A value of 0 means no timeout. The
default value is according to the settings of the WebSessionTimeout
global parameter(see ''Configuring Web Security Settings'' on page 71).