Lenovo Flex System Fabric CN4093, Инструкция по применению

Страница: 95 / 634

© Copyright Lenovo 2017 Chapter 4: Securing Administration
95
The administrator can choose the number of days allowed before each password
expires. When a strong password expires, the user is allowed to log in one last time
(last time) to change the password. A warning provides advance notice for users to
change the password.
User Access Control Menu
The end ‐ user access control commands allow you to configure end ‐ user accounts.
Setting Up User IDs
Up to 20 user IDs can be configured in the User ID menu.
Defining a User’s Access Level
The end user is by default assigned to the user access level (also known as class of
service, or CoS). CoS for all user accounts have global access to all resources except
for User CoS, which has access to view only resources that the user owns. For more
information, see Table 7 on page 102 .
To change the user’s level, enter the class of service cos command:
Validating a User’s Configuration
Enabling or Disabling a User
An end user account must be enabled before the switch recognizes and permits
login under the account. Once enabled, the switch requires any user to enter both
username and password.
Locking Accounts
To protect the switch from unauthorized access, the account lockout feature can be
enabled. By default, account lockout is disabled. To enable this feature, ensure the
strong password feature is enabled ( See “Strong Passwords” on page 94 ). Then use
the following command:
After multiple failed login attempts, the switch locks the user account if lockout
has been enabled on the switch.
CN 4093(config)# access user 1 name <
1 ‐ 8 characters
>
CN 4093(config)# access user 1 password
Changing user1 password; validation required:
Enter current admin password:
<current administrator password>
Enter new user1 password:
<new user password>
Re-enter new user1 password:
<new user password>
New user1 password accepted.
CN 4093(config)# access user 1 level {user|operator|administrator}
CN 4093# show access user uid 1
CN 4093(config)# [no] access user 1 enable
CN 4093(config)# access user strong-password lockout