User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
153
NOTE: The Mesh
Point maintains a
separate, local adminis-
trator database that
automatically “learns”
administrators who suc-
cessfully logon through
a Fortress user database
or third-party RADIUS
server (refer to Section
2.2.3).
4.5.3 User Authentication
Users for whom you create authentication accounts will be one
of two types: Secure Client users connect to the Mesh Point’s
encrypted interfaces via devices running the Fortress Secure
Client; Admin users are using the Mesh Point’s local user
authentication database to gain administrative access to the
Mesh Point’s management interface.
View currently configured users with
show userauth:
# show userauth
UserName UserFullname IdleTimeout SessionTimeout AdminState AdminAuth
-------- ------------ ----------- -------------- ---------- -------------
admin2 30 200 active Administrator
person1 Full Name1 30 200 active None
person2 Full Name2 30 200 active None
person3 Full Name3 30 200 active None
Add new users interactively with add userauth:
# add userauth
UserName (User name):
<username>
Password (User password): <userpw>
Password Confirm (Password Confirm): <userpw>
IdleTimeout[30] (User idle timeout in minutes): 1–720
SessionTimeout[1200] (User session timeout in minutes): 1—200
UserFullname (User full name):
<“Full Username”>
AdminState (active|inactive to set User's admin state): active|inactive
AdminAuth (logviewer|maintenance|administrator|none):none|administrator|maintenance|logviewer
Alternatively, you can add users to the Mesh Point’s internal
RADIUS server using valid Mesh Point CLI switches with the
add command:
# add userauth -name <username> -passwd <userpw> -passwordConfirm <userpw>
-idletimeout 1–720 -sestimeout 1—200 -fullname <“Full Username”> -admin active|inactive
-adminauth none|administrator|maintenance|logviewer
NOTE: Passwords
do not need to be
unique.
The username (-name) and password (-passwd) are the
credentials the user must input in order to authenticate on the
Mesh Point. Both are required. Usernames must be 1–32
(inclusive) alphanumeric characters in length. Passwords must
comply with the requirements configured with
set account
(page 17). You can also enter a user’s full name with the
-fullname switch, which accepts an entry up to 250
characters in length; enclose the string in quotation marks to
include spaces.