R3166-R3206-HP High-End Firewalls Access Control Configuration Guide-6PW101

128
Task Remarks
Configuring user group attributes Optional
Displaying and maintaining local users and local user groups Optional
Configuring local user attributes
Follow these steps to configure attributes for a local user:
To do… Use the command… Remarks
Enter system view system-view —
Set the password display mode for
all local users
local-user
password-display-mode { auto
| cipher-force }
Optional
auto by default, indicating to display
the password of a local user in the way
defined by the password command.
Add a local user and enter local
user view
local-user user-name
Required
No local user exists by default.
Configure a password for the local
user
password [ { cipher | simple }
password ]
Optional
If you do not configure any password
for a local user, the local user does not
need to provide any password during
authentication, and can pass
authentication after entering the
correct local user name and passing
attribute checks. To achieve higher
security, configure a password for
each local user.
If you specify no keyword or argument,
the command will prompt you to
provide a password.
Specify the service types for the
local user
service-type { ftp | { ssh | telnet
| terminal } * | portal | ppp }
Required
By default, no service is authorized to a
local user.
Place the local user to the state of
active or blocked
state { active | block }
Optional
When created, a local user is in the
active state by default, and the user
can request network services.
Set the maximum number of
concurrent users of the local user
account
access-limit max-user-number
Optional
By default, there is no limit to the
maximum number of concurrent users
of a local user account.
The limit is effective only for local
accounting, and is not effective for FTP
users.