MSM7xx Controllers Configuration Guide v6.4.0

The following options can be used to prevent the management tool from being locked by an idle
manager or operator:
• Terminates the current manager session: When enabled, an active manager or operator
session will be terminated by the login of another manager. This prevents the management
tool from being locked by an idle session until the Account inactivity logout timeout expires.
• Is blocked until the current manager logs out: When enabled, access to the management tool
is blocked until an existing manager logs out or is automatically logged out due to an idle
session.
An operator session is always terminated if a manager logs in. An active operator session
cannot block a manager from logging in.
• Terminates the current operator session: When enabled, an active operators session will be
terminated by the login of another operator. This prevents the management tool from being
locked by an idle session until the Account inactivity logout timeout expires.
Operator access to the management tool is blocked if a manager is logged in. An active
manager session cannot be terminated by the login of an operator.
An operator session is always terminated if a manager logs in. An active operator session
cannot block a manager from logging in.
• Login control: If login to the management tool fails five times in a row (bad username and/or
password), login privileges are blocked for five minutes. Once five minutes expires, login
privileges are once again enabled. However, if the next login attempt fails, privileges are
again suspended for five minutes. This cycle continues until a valid login occurs. You can
configure the number of failures and the timeout.
• Account inactivity logout: By default, if a connection to the management tool remains idle for
more than ten minutes, the controller automatically terminates the session. You can configure
the timeout.
Administrative user authentication
Login credentials can be verified using local account settings and/or an external RADIUS sever.
This also affects how many accounts you can have.
• Local: Select this option to use a single manager and operator account. Configure the settings
for these accounts under Manager account and Operator account.
• RADIUS: Using a RADIUS server enables you to have multiple manager and operator accounts,
each with a unique login name and password. To setup this option, see “Authenticating
manager logins using a third-party RADIUS server” (page 368).
If both options are enabled, the RADIUS server is always checked first.
20 Using the management tool