Siemens RUGGEDCOM ROS v4.3, User Manual

Page: 130 / 266

Chapter 4
System Administration
RUGGEDCOM ROS
User Guide
114 Configuring Passwords
NOTE
RUGGEDCOM ROS requires that all user passwords meet strict guidelines to prevent the use of
weak passwords. When creating a new password, make sure it adheres to the following rules:
• Must not be less than 8 characters in length.
• Must not include the username or any 4 continous characters found in the username.
For example, if the username is Subnet25 , the password may not be subnet25admin ,
subnetadmin or net25admin . However, net-25admin or Sub25admin is permitted.
• Must have at least one alphabetic character and one number. Special characters are permitted.
• Must not have more than 3 continuously incrementing or decrementing numbers. For example,
Sub123 and Sub19826 are permitted, but Sub12345 is not.
An alarm will generate if a weak password is configured. The weak password alarm can be
disabled by the user. For more information about disabling alarms, refer to Section 4.6,
“Managing Alarms” .
2. Configure the following parameter(s) as required:
Parameter Description
Auth Type Synopsis: { Local, RADIUS, , RADIUSorLocal, TACACS
+orLocal }
Default: Local
Password can be authenticated using localy configured values,
or remote RADIUS or server. Setting value to any of
combinations that involve RADIUS or require Security
Server Table to be configured.
Settings:
• Local - Authentication from the local Password Table.
• RADIUS - Authentication using a RADIUS server.
• - Authentication using a server.
• RADIUSOrLocal - Authentication using RADIUS. If the server
cannot be reached, authenticate from the local Password Table.
• OrLocal - Authentication using . If the server
cannot be reached, authenticate from the local Password Table
NOTE
For console access, local credentials will always be
checked first regardless of the device configuration.
If server authentication is required, requests to the
server will be sent only if local authentication fails.
Guest Username Synopsis: Any 15 characters
Default: guest
Related password is in field Guest Password; view only, cannot
change settings or run any commands.
Guest Password Synopsis: 19 character ASCII string
Related username is in field Guest Username; view only, cannot
change settings or run any commands.
Confirm Guest Password Synopsis: 19 character ASCII string
Related username is in field Guest Username; view only, cannot
change settings or run any commands.
Operator Username Synopsis: Any 15 characters
Default: operator