AudioCodes Mediant 800B - Page 82

User's Manual 82 Document #: LTRT-10632
Mediant 800B Gateway & E-SBC
Parameter Description

Only Security Administrator and Master users can add, edit, and
delete Administrator and Monitor users.
SSH Public Key
public-key
[WebUsers_SSHPublicKey]
Defines a Secure Socket Shell (SSH) public key for RSA public-key
authentication (PKI) of the remote user when logging into the device's
CLI through SSH. Connection to the CLI is established only when a
successful handshake with the user’s private key occurs.
The valid value is a string
of up to 512 characters. By default, no value
is defined.
Note:
 For more information on SSH and for enabling SSH, see Enabling
SSH with RSA Public Key for CLI on page 90.
 To configure whether SSH public keys are optional or mandatory,
use the SSHRequirePublicKey parameter.
 If not configured, the settings of the global parameter,
SSHAdminKey is used.
Status
status
[WebUsers_Status]
Defines the status of the user.
 New = (Default) User is required to change its password on the
next login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.
 Valid = User can log in to the Web interface as normal.
 Failed Login = The state is automatically set for users that exceed
a user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see 'Configuring Web Session
and Access Settings' on page 84). These users can log in only
after a user-defined timeout configured by the 'Block Duration'
parameter (see below) or if their status is changed (to New or
Valid) by a Security Administrator or Master.
 Inactivity = The state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see 'Configuring Web Session and
Access Settings' on page 84). These users can only log in to the
Web interface if their status is changed (to New or Valid) by a
System Administrator or Master.
Note:
 The Inactivity status is applicable only to Administrator and Monitor
users; Security Administrator and Master users can be inactive
indefinitely.
 For security, it is recommended to set the status of a newly added
user to
New
in order to enforce password change.
Security
Password Age
password-age
[WebUsers_PwAgeInterval]
Defines the duration (in days) of the validity of the password. When
the duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.
Session Limit
session-limit
[WebUsers_SessionLimit]
Defines the maximum number of concurrent Web interface sessions
allowed for the specific user. For example, if configured to 2, the same
user account can be logged into the device’s Web interface (i.e., same
username-password combination) from two different management
stations (i.e., IP addresses) at any one time. Once the user logs in, the
session is active until the user logs off (by clicking the Log off icon on