Configuring Local and Remote System Administrators
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Centrally Managed Administration Guide|235
To set the Session Timeout value for both local and remotely defined administrators:
1. Click Security Settings.
The Administrators Security Settings window opens.
2. Configure the session timeout (maximum time period of inactivity in minutes). The
maximum value is 999 minutes.
3. To limit login failure attempts, click the Limit administrators login failure attempts
checkbox.
4. Enter the number of Maximum consecutive login attempts allowed before an
administrator is locked out.
5. In Lock period, enter the time (in seconds) that must pass before a locked out
administrator can attempt to log in again.
6. To enforce password complexity on administrators, click the checkbox and enter the
number of days for the password to expire.
Note - We strongly recommend the use of complex passwords. Password
must contain at least 12 characters - uppercase, lowercase, numeric, and
non-alphanumeric characters. Allowed alphanumeric characters: ! @ # %
^ & * ( ) - _ + : ;
7. Click Apply
Configuring a RADIUS Server for non-local Quantum Spark
Appliance users
Non-local users can be defined on a RADIUS server and not in the Quantum Spark Appliance.
When a non-local user logs in to the appliance, the RADIUS server authenticates the user and
assigns the applicable permissions. You must configure the RADIUS server to correctly
authenticate and authorize non-local users.
Notes:
n
The configuration of the RADIUS Servers may change according to the type of
operating system on which the RADIUS Server is installed.
n
If you define a RADIUS user with a null password (on the RADIUS server), the
appliance cannot authenticate that user.
Configuring a Steel-Belted RADIUS server for non-local appliance users
1. Create the dictionary file checkpoint.dct on the RADIUS server, in the default
dictionary directory (that contains radius.dct). Add these lines in the
checkpoint.dct file:
To Next Page
