Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module Expansion, Configuration Manual, Page: 212 / 742

11-8
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
Chapter 11 Configuring AAA Servers and the Local Database
Configuring the Local Database
where the options are as follows:
• username —A string from 4 to 64 characters long.
•
password password —A string from 3 to 16 characters long.
• privilege level —The privilege level that you want to assign to the new user account (from 0 to 15).
The default is 2. This privilege level is used with command authorization.
•
nopassword —Creates a user account with no password.
The encrypted keyword is typically for display only. When you define a password in the username
command, the FWSM encrypts it when it saves it to the configuration for security purposes. When you
enter the
show running-config command, the username command does not show the actual password;
it shows the encrypted password followed by the encrypted keyword. For example, if you enter the
password “test,” the show running-config display would appear to be something like the following:
username pat password DLaUiAX3l78qgoB5c7iVNw== nt-encrypted
Step 2
To configure a local user account with VPN attributes, perform the following steps:
a. Enter the following command:
hostname(config)# username username attributes
When you enter the username attributes command, you enter username mode. The commands
available in this mode are as follows:
• group-lock
•
password-storage
• vpn-access-hours
•
vpn-filter
• vpn-framed-ip-address
•
vpn-group-policy
• vpn-idle-timeout
•
vpn-session-timeout
• vpn-simultaneous-logins
•
vpn-tunnel-protocol
Use these commands as needed to configure the user profile. For more information about these
commands, see the
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services
Module Command Reference .
b.
When you have finished configuring the user profiles, enter exit to return to config mode.
For example, the following command assigns a privilege level of 15 to the admin user account:
hostname(config)# username admin password passw0rd privilege 15
The following command creates a user account with no password:
hostname(config)# username bcham34 nopassword
The following commands creates a user account with a password, enters username mode, and specifies
a few VPN attributes:
hostname(config)#
username user1 password gOgeOus
hostname(config)# username user1 attributes