Cisco ASR 5000 Series Administration Guide

This command displays all of the configuration parameters you modified within the Local context during this
session. The following displays sample output for this command. In this example, a security administrator
named testadmin was configured.
config
context local
interface mgmt1
ip address 192.168.1.10 255.255.255.0
#exit
subscriber default
#exit
administrator testadmin encrypted password fd01268373c5da85
inspector testinspector encrypted password 148661a0bb12cd59
exit
port ethernet 5/1
bind interface mgmt1 local
#exit
Configuring Local-User Administrative Users
The local user type supports ANSI T1.276-2003 password security protection. Local-user account information,
such as passwords, password history, and lockout states, is maintained in /flash. This information is saved
immediately in a separate local user database subject to AAA based authentication and is not used by the rest
of the system. As such, configured local-user accounts are not visible with the rest of the system configuration.
In release 20.0 and higher Trusted StarOS builds, the local user database is disabled. The Global
Configuration mode local-user commands, and Exec mode show local-user and update local-user
commands are unavailable. For additional information on Trusted builds, see the System Operation and
Configuration chapter.
Important
Use the example below to configure local-user administrative users:
configure
local-user username name
end
Notes:
•
Additional keyword options are available identify active administrators or place time thresholds on the
administrator. Refer to the Command Line Interface Reference for more information about the local-user
username command.
For additional information on the local-user database, see Updating and Downgrading the local-user Database,
on page 56.
Verifying Local-User Configuration
Verify that the configuration was successful by entering the following command:
show local-user verbose
This command displays information on configured local-user administrative users. A sample output for this
command appears below. In this example, a local-user named SAUser was configured.
Username: SAUser
Auth Level: secadmin
Last Login: Never
Login Failures: 0
ASR 5500 System Administration Guide, StarOS Release 21.4
55
System Settings
Configuring Local-User Administrative Users

Cisco ASR 5000 Series Specifications

General

Brand	Cisco
Model	ASR 5000 Series
Category	Network Router
Language	English