User Guide for FibeAir® IP-20 All-Outdoor Products, CeraOS 10.5
Page 688 of 825
Ceragon Proprietary and Confidential
Parameter
Input Type
Permitted Values
Description
profile-name
Text String
Up to 49 characters
The name of the user profile.
channel-type
Variable
Serial
Web
NMS
Telnet
SSH
The access channel type allowed
or disallowed by the command for
users with this user profile.
allowed
Boolean
yes
no
•
yes
–
Users with this user
profile can access the access
channel type defined in the
preceding parameter.
•
no - Users with this user profile
cannot access the access
channel type defined in the
preceding parameter.
The
following command prevents users with the user profile “operator” from
accessing the system via NMS:
root> platform security access-control profile edit mng-channel
name operator channel-type NMS allowed no
21.3.3
Configuring User Accounts (CLI)
You can configure up to 2,000 users. Each user has a user name, password, and
user profile. The user profile defines a set of read and write permission levels per
functionality group (see
Configuring User Profiles (CLI)
).
To create a new user account, enter the following command:
root> platform security access-control user-account add user-
name <user-name> profile-name <profile-name> expired-date
<expired-date>
When you create a new user account, the system will prompt you to enter a
default password. If Enforce Password Strength is activated (refer to
Password Strength Enforcement (CLI)
), the password must meet the following
criteria:
•
Password length must be at least eight characters.
•
Password must include characters of at least three of the following character
types: lower case letters, upper case letters, digits, and special characters. For
purposes of meeting this requirement, upper case letters at the beginning of
the password and digits at the end of the password are not counted.
•
The last five passwords you used cannot be reused.
To block or unblock a user account, enter the following command:
root> platform security access-control user-account block user-
name <user-name> block <block>
To change a user account's expiration date, enter the following command:
root> platform security access-control user-account edit
expired-date user-name <user-name> expired-date <expired-date>
