Black Box ET0010A, Cli User Manual

Page: 29 / 212

User Administration
30 ETEP CLI User Guide
To disable an account:
1 Enter user configuration mode.
admin> configure
config> user-config
user-config>
2 Type
user-enable <username> false
, where username specifies the user account to disable.
Example
The following example disables the tech1 user account.
admin> configure
config>
user-config
user-config> user-enable tech1 false
Related topic:
●
“user-enable” on page 202
Login Failures
When configured for default password enforcement, the ETEP allows an unlimited number of failed login
attempts without locking the user out of the appliance. When strong password enforcement is enabled, the
ETEP allows three consecutive failed login attempts in a 15 minute period prior to locking an account.
After the third failure the account is locked for 15 minutes. The Administrator can restore a disabled
account with the
user-enable command.
To determine whether an account has been disabled due to login failures, issue the show audit-log
command and review the log file for a series of login failures. An account that has been locked due to
login failures is not flagged in the user-config
show command.
Related topic:
●
“user-enable” on page 202
Using the Login Banner
The login banner is disabled by default. When enabled, the login banner appears after a successful login
to the CLI and the EncrypTight application. A user must acknowledge the terms of usage to successfully
log in. The banner text cannot be modified or replaced.
A show command is available from banner-config mode that displays the login banner that is saved in the
ETEP filesystem, regardless of whether the banner is enabled. To display the banner enter the following
command:
banner-config>
show
The login banner contains the U.S. Department of Defense banner text, shown below.
You are accessing a U.S. Government (USG) Information System (IS) that is
provided for USG-authorized use only.