AudioCodes Mediant 500 MSBR, User Manual

Page: 75 / 1248

Version 7.2 75 Mediant 500 MSBR
User's Manual 7. Web-Based Management
SSH Public Key
public-key
[WebUsers_SSHPublicKey
]
Defines a Secure Socket Shell (SSH) public key for RSA public-key
authentication (PKI) of the remote user when logging into the device's
CLI through SSH. Connection to the CLI is established only when a
successful handshake with the user’s private key occurs.
The valid value is a string of up to 512 characters. By default, no
value is defined.
Note:

For more information on SSH and for enabling SSH, see Enabling
SSH with RSA Public Key for CLI on page 84.

To configure whether SSH public keys are optional or mandatory,
use the SSHRequirePublicKey parameter.

If not configured, the settings of the global parameter,
SSHAdminKey is used.
Status
status
[WebUsers_Status]
Defines the status of the user.

New = (Default) User is required to change its password on the
next login. When the user logs in to the Web interface, the user is
immediately prompted to change the current password.

Valid = User can log in to the Web interface as normal.

Failed Login = The state is automatically set for users that exceed
a user-defined number of failed login attempts, set by the 'Deny
Access on Fail Count' parameter (see Configuring Web Session
and Access Settings on page 77). These users can log in only after
a user-defined timeout configured by the 'Block Duration'
parameter (see below) or if their status is changed (to New or
Valid) by a Security Administrator or Master.

Inactivity = The state is automatically set for users that have not
accessed the Web interface for a user-defined number of days, set
by the 'User Inactivity Timer' (see Configuring Web Session and
Access Settings on page 77). These users can only log in to the
Web interface if their status is changed (to New or Valid) by a
System Administrator or Master.
Note:

The Inactivity status is applicable only to Administrator and Monitor
users; Security Administrator and Master users can be inactive
indefinitely.

For security, it is recommended to set the status of a newly added
user to
New in order to enforce password change.
Security
Password Age
password-age
[WebUsers_PwAgeInterval
]
Defines the duration (in days) of the validity of the password. When
the duration elapses, the user is prompted to change the password;
otherwise, access to the Web interface is blocked.
The valid value is 0 to 10000, where 0 means that the password is
always valid. The default is 90.