D-111
Cisco ONS 15454 DWDM Installation and Operations Guide, R6.0
August 2005
Appendix D Network Element Defaults
D.3.2 ETSI Node Default Settings
NODE.security.other.InactiveDuration 45 (days) • 1, 2, 3 .. 99 when
DisableInactiveUser is TRUE
• 45 (and N/A) when
DisableInactiveUser is FALSE
NODE.security.other.PMClearingPrivilege Provisioning Provisioning, Superuser
NODE.security.other.SingleSessionPerUser FALSE TRUE, FALSE
NODE.security.passwordAging.EnforcePasswordAging FALSE TRUE, FALSE
NODE.security.passwordAging.maintenance.AgingPeriod 45 (days) 20–90
NODE.security.passwordAging.maintenance.WarningPeriod 5 (days) 2–20
NODE.security.passwordAging.provisioning.AgingPeriod 45 (days) 20–90
NODE.security.passwordAging.provisioning.WarningPeriod 5 (days) 2–20
NODE.security.passwordAging.retrieve.AgingPeriod 45 (days) 20–90
NODE.security.passwordAging.retrieve.WarningPeriod 5 (days) 2–20
NODE.security.passwordAging.superuser.AgingPeriod 45 (days) 20–90
NODE.security.passwordAging.superuser.WarningPeriod 5 (days) 2–20
NODE.security.passwordChange.CannotChangeNewPassword FALSE TRUE, FALSE
NODE.security.passwordChange.CannotChangeNewPasswordForN
Days
20 (days) 20–95
NODE.security.passwordChange.NewPasswordMustDifferFromOld
ByNCharacters
1 (characters) 1–20
NODE.security.passwordChange.PreventReusingLastNPasswords 1 (times) 1–10
NODE.security.passwordChange.RequirePasswordChangeOnFirstL
oginToNewAccount
FALSE TRUE, FALSE
NODE.security.radiusServer.ctc.AccountingPort 1813 (port) 0–32767
NODE.security.radiusServer.ctc.AuthenticationPort 1812 (port) 0–32767
NODE.security.radiusServer.EnableNodeAsFinalAuthenticatorWhe
nAuthenticationEnabled
TRUE FALSE, TRUE
NODE.security.serialCraftAccess.EnableCraftPort TRUE TRUE, FALSE
NODE.security.shellAccess.AccessState NonSecure Disabled, NonSecure, Secure
NODE.security.shellAccess.EnableShellPassword FALSE TRUE, FALSE
NODE.security.shellAccess.TelnetPort 23 23–9999
NODE.security.snmpAccess.AccessState NonSecure Disabled, NonSecure
NODE.security.tl1Access.AccessState NonSecure Disabled, NonSecure, Secure
NODE.security.userLockout.FailedLoginsAllowedBeforeLockout 5 (times) 0–10
NODE.security.userLockout.LockoutDuration 00:30
(mins:secs)
00:00, 00:05, 00:10 .. 10:00
NODE.security.userLockout.ManualUnlockBySuperuser FALSE TRUE, FALSE
Table D-23 Node Default Settings (ETSI) (continued)
Default Name Default Value Default Domain