Cisco ONS 15310-MA SDH, Руководство по процедурам

Страница: 451 / 632

17-45
Cisco ONS 15310-MA SDH Procedure Guide, Release 9.1 and Release 9.2
78-19416-01
Chapter 17 DLPs H100 to H199
•
Warning—Sets the number days the user will be warned to change his or her password for each
security level. The range is 2 to 20 days.
Step 6 In the Other area, you can provision the following:
•
Single Session Per User — If checked, limits users to one login session at one time.
• Disable Inactive User—If checked, disables users who do not log into the node for the period of time
specified in the Inactive Duration box. The Inactive Duration range is 45 to 90 days.
Step 7
Click Apply .
Step 8 Return to your originating procedure (NTP).
DLP-H142 Change the Security Policy on Multiple Nodes
Step 1
From the View menu, choose Go to Network View .
Step 2
Click the Provisioning > Security > Policy tabs. A read-only table of nodes and their policies appears.
Step 3 Click a node on the table that you want to modify, then click Change .
Step 4
If you want to modify the idle user timeout period, click the hour (H) and minute (M) arrows in the Idle
User Timeout area for the security level you want to provision: RETRIEVE, MAINTENANCE,
PROVISIONING, or SUPERUSER. The idle period time range is 0 and 16 hours, and 0 and 59 minutes.
The user is logged out after the idle user timeout period is reached.
Step 5 In the User Lockout area, you can modify the following:
•
Failed Logins Before Lockout—Displays the number of failed login attempts a user can make before
the user is locked out from the node. You can choose a value between 0 and 10.
•
Manual Unlock by Superuser—Allows a user with Superuser privileges to manually unlock a user
who has been locked out from a node.
•
Lockout Duration—Sets the amount of time the user will be locked out after a failed login. You can
choose a value between 0 and 10 minutes, and 0 and 55 seconds (in five-second intervals). If you
checked Manual Unlock by Superuser, Lockout Duration is disabled.
Step 6
In the Password Change area, you can modify the following:
•
Prevent Reusing Last [ ] Passwords—Choose a value between 1 and 10 to set the number of different
passwords the user must create before he or she can reuse a password.
• New Password must Differ from the Old Password—Choose the number of characters that must
differ between the old and new password. The default number is 1.
Purpose This task changes the security policy for multiple nodes, including idle
user timeouts, user lockouts, password change, and concurrent login
policies.
Tools/Equipment None
Prerequisite Procedures DLP-H29 Log into CTC, page 16-43
Required/As Needed As needed
Onsite/Remote Onsite or remote
Security Level Superuser only