BigIron RX Series Configuration Guide 77
53-1002253-01
Setting up local user accounts
4
Using the Web Management Interface
To change a local user password using the Web Management Interface, you must first delete the 
user account, then re-add it with the new password. Use the following procedure.
Before you can change a local user account using the Web Management Interface, you must enable 
this capability by entering the CLI command "password-change any" at the global CONFIG level of the 
CLI.
1. Log in to the Web Management Interface using a valid user name and password that has a 
read-write privilege level.  
2. Select Configure->System->Management->User Account.
3. User account information is listed in a table. Click on the Delete button next to the user 
account whose password you wish to change.
4. Click on Add User Account.
5. Enter the user name in the Username field.  The name cannot contain blanks.
6. Enter the password in the Password field.  The password cannot contain blanks.
7. If necessary, select the management privilege level from the Privilege pulldown menu.  By 
default, the system assigns privilege level 5 (Read-Only), which allows the user to display 
information but not to make configuration changes.
8. Click the Add button to save the change to the device’s running-config file.
9. Repeat step 3 to step 8 for each user account.
10. Select the Save link at the bottom of the dialog.  Select Yes when prompted to save the 
configuration.
The current and previous passwords are stored in the device’s running configuration file in 
encrypted form.  
BigIron RX# show run
username admin password .....
username admin history  .....
username readonly privilege 5 password .....
username user1 privilege 4 password .....
In the running configuration file, the user’s previous passwords are displayed in encrypted form 
following the history parameter.
Username, password and login rules
Regular password rules for username and password creation is the default condition for the 
system. The following are the regular password rules:
• A minimum of one character is required to create a password.
• The last three passwords are stored in the CLI.
• Passwords do not expire.
• Users are not locked out (disabled) after failed login attempts.
If the enable strict-password-enforcement command is configured, then the following password 
rules apply: