Avaya Media Gateway G250, Administration Manual

Page: 51 / 840

Managing login permissions
Issue 5 June 2008 51
Configuring usernames
To create a username, use the
username
command. To remove a username, use the
no
username
command. To change the password for a username, use the
password
command.
To change the privilege level for a username, remove the username and add it again. You need
an Admin privilege level to use the
username
and
no username
commands.
Note:
Note:
When ASG authentication is enabled on the gateway, all password user accounts
with usernames similar to the reserved Avaya Services logins are deactivated.
The logins are "rasaccess", "sroot", "init", "inads", and "craft". The login "dadmin"
is reserved for an Avaya business partner remote services account, which can be
defined for ASG authentication. For information about ASG authentication, refer
to
Authenticating service logins with Access Security Gateway (ASG)
authentication on page 54.
When you create a new user, you must define the user’s password and privilege level. Take
care to enter a password that conforms with the password policies described in
Managing
password length and contents on page 51.
The following example creates a user named John with the password john7Long and a
Read-write privilege level:
Managing password length and contents
Use the following commands to control password length and the characters it must include:
●
Use the
login authentication min-password-length
command to set the
minimum password length to between 8 and 31 characters. The default length is
8 characters.
●
Use the
login authentication min-password-digit-chars
command to set the
minimum number of digit characters that a password must contain. The default is 0.
●
Use the
login authentication min-password-lower-chars
command to set the
minimum number of lowercase characters that a password must contain. The default is 1.
●
Use the
login authentication min-password-upper-chars
command to set the
minimum number of uppercase characters that a password must contain. The default is 0.
●
Use the
login authentication min-password-special-chars
command to set
the minimum number of special characters that a password must contain. Special
characters are any printable non-alphanumeric characters except for white characters
(blank or tab), and a double quote ("), which is ascii character 34. The default is 0 special
characters.
G350-001
(super)# username john password
john7Long
access-type
read-write