Cisco Firepower 4100

set remote-user
To restrict access to those users matching an established user role, use the set remote-user command.
set remote-user default-role {assign-default-role|no-login}
Syntax Description
When a user attempts to log in and the remote authentication provider does
not supply a user role with the user’s authentication information, the user is
allowed to log in with a read-only user role.
assign-default-role
When a user attempts to log in and the remote authentication provider does
not supply a user role with the user’s authentication information, access is
denied.
no-login
Command Modes
Security mode
Command History
ModificationRelease
Command added.1.1(1)
Usage Guidelines
assign-default-role is the default behavior.
Example
This example shows how to enter security mode and deny access to users without a user role:
FP9300-A# scope security
FP9300-A /security # set remote-user default-role no-login
FP9300-A /security* # commit-buffer
FP9300-A /security #
Related Commands
DescriptionCommand
Specifies the default authentication service.set authentication
Cisco Firepower 4100/9300 FXOS Command Reference
221
S Commands
set remote-user