User authentication Local users
IX20 User Guide
889
a. Set the number of unsuccessful login attempts before the user is locked out of the device.
where value is any integer. Theminimum value is 1, and the default value is 5.
b. Set the amount of time that the user is locked out after the number of unsuccessful login
attempts defined in lockout tries:
(config auth user new_user> lockout duration value
(config auth user new_user)>
where value is any number of minutes, or seconds, and takesthe format number{m|s}.
For example, to set duration to ten minutes, enter either 10m or 600s:
(config auth user new_user)> lockout duration 600s
(config auth user new_user)>
The minimum value is 1 second, and the maximum is 15 minutes. The default is 15
minutes.
7. Add groups for the user.
Groupsdefine user access rights. See Authentication groupsfor information about configuring
groups.
a. Add a group to the user. For example, to add the admin group to the user:
(config auth user new_user> add group end admin
(config auth user new_user)>
Note Every user must be configured with at least one group.
b. (Optional) Add additional groupsby repeating the add group command:
(config auth user new_user> add group end serial
(config auth user new_user)>
To remove a group from auser:
a. Use the show command to determine the index number of the group to bedeleted:
(config auth user new_user> show group
0 admin
1 serial
(config auth user new_user>
b. Typethe following:
(config auth user new_user)> del group n
(config auth user new_user)>
Where n is index number of the authentication method to be deleted. For example, to
delete the serial group as displayed by the example show command, above:
(config auth user new_user)> del group 1
(config auth user new_user)>
8. (Optional) Add SSH keys for the user to use passwordlessSSH login:
To Next Page
Loading...