20
Step Command
Remarks
{
In non-FIPS mode:
service-type
{
ftp
| {
http
|
https
|
ssh
|
telnet
|
terminal
} * }
{
In FIPS mode:
service-type
{
https
|
ssh
|
terminal
} *
5.
(Optional.) Place the local
user to the active or
blocked state.
state
{
active
|
block
}
By default, a created local user is in
active state and can request
network services.
6.
(Optional.) Set the upper
limit of concurrent logins
using the local user
name.
access-limit max-user-number
By default, the number of concurrent
logins is not limited for the local
user.
This command takes effect only
when local accounting is configured
for the local user. It does not apply to
FTP, SFTP, or SCP users, who do
not support accounting.
7.
(Optional.) Configure
binding attributes for the
local user.
bind-attribute
{
ip
ip-address
|
location
interface
interface-type
interface-number
|
mac
mac-address
|
vlan vlan-id
} *
By default, no binding attribute is
configured for a local user.
8.
(Optional.) Configure
authorization attributes
for the local user.
authorization-attribute
{
acl
acl-number
|
idle-cut
minute
|
ip-pool pool-name
|
ipv6-pool
ipv6-pool-name
|
user-profile
profile-name
|
user-role role-name
|
vlan
vlan-id
|
work-directory
directory-name
} *
The following default settings apply:
•
FTP, SFTP, and SCP users
have the root directory of the
NAS set as the working
directory. However, the users
do not have permission to
access the root directory.
•
The network-operator user role
is assigned to local users that
are created by a
network-admin or level-15
user.
9.
(Optional.) Configure
password control
attributes for the local
user.
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password
length:
password-control length
length
•
Configure the password
composition policy:
password-control
composition type-number
type-number
[
type-length
type-length
]
•
Configure the password
complexity checking policy:
password-control
complexity
{
same-character
|
user-name
}
check
•
Configure the maximum login
attempts and the action to
take if there is a login failure:
password-control
login-attempt login-times
Optional.
By default, the local user uses
password control attributes of the
user group to which the local user
belongs.
Only device management users
support the password control
feature.
