Zte ZXR10 5900E Series - Checking User Security Management

ZXR105900ESeriesRoutineMaintenance
5.2CheckingUserSecurityManagement
Purpose
Thistopicdescribeshowtocheckusersecuritymanagementtoensurethattheequipment
operationenvironmentissecure.
Steps
1.Changetheuserpasswords.
2.Changetheenablepasswords.
ReferenceStandards
1.Enterthecong-system-usermodeandruntheusernamexxxpasswordcommandto
modifytheuserpasswords.
Generally,itisrecommendedtochangetheuserpasswordsonceevery3-6months.
Itisrecommendedtosetapasswordwithatleast6characters.Thepasswordshould
containatleasttwoofthefollowingtypes:number,lowercase,uppercaseandspecial
character.
Forexample:
ZXR10(config)#system-user
ZXR10(config-system-user)#user-namexxx
ZXR10(config-system-user-username)#passwordxxxxxxx
ZXR10(config-system-user-username)#bindauthentication-template1
ZXR10(config-system-user-username)#bindauthorization-template1
ZXR10(config-system-user-username)#exit
ZXR10(config-system-user)#authentication-template1
ZXR10(config-system-user-authen-temp)#bindaaa-authentication-template2001
ZXR10(config-system-user-authen-temp)#exit
ZXR10(config-system-user)#authorization-template1
ZXR10(config-system-user-author-temp)#bindaaa-authorization-template2001
ZXR10(config-system-user-author-temp)#local-privilege-level15
ZXR10(config-system-user-author-temp)#exit
2.Inglobalcongurationmode,runtheenablesecretlevelcommandtomodifytheenable
passwordsatdifferentrightlevels.
Generally,itisrecommendedtouseenablepasswordsthataredifferentfromtheuser
passwords.
Itisrecommendedtosetanenablepasswordwithatleast6characters.Thepassword
shouldcontainatleasttwoofthefollowingtypes:number,lowercase,uppercaseand
specialcharacter.
Forexample:
5-2
SJ-20150114102049-013|2015-01-15(R1.0)ZTEProprietaryandCondential