R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

108
expiration-date (local user view)
Syntax
expiration-date time
undo expiration-date
View
Local user view
Default level
3: Manage level
Parameters
time: Expiration time of the local user, in the format HH:MM:SS-MM/DD/YYYY,
HH:MM:SS-YYYY/MM/DD, MM/DD/YYYY-HH:MM:SS, or YYYY/MM/DD-HH:MM:SS. HH:MM:SS
indicates the time, where HH ranges from 0 to 23, and MM and SS range from 0 to 59. MM/DD/YYYY
or YYYY/MM/DD indicates the date, where YYYY ranges from 2000 to 2035, MM ranges from 1 to 12,
and the range of DD depends on the month. Except for the zeros in 00:00:00, leading zeros can be
omitted. For example, 2:2:0-2008/2/2 equals 02:02:00-2008/02/02.
Description
Use expiration-date to set the expiration time of a local user.
Use undo expiration-date to remove the configuration.
By default, a local user has no expiration time and no time validity checking is performed.
When some users need to access the network temporarily, create a guest account and specify a validity
time and an expiration time for the account to control the validity of the account. When a user uses the
guest account for local authentication and passes the authentication, the firewall checks whether the
current system time is between the validity time and the expiration time. If so, it permits the user to access
the network. Otherwise, it denies the access request of the user.
Related commands: validity-date.
Examples
# Set the expiration time of user abc to 12:10:20 on May 31, 2008.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] expiration-date 12:10:20-2008/05/31
group
Syntax
group group-name
undo group
View
Local user view
Default level
3: Manage level