R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

115
Default level
3: Manage level
Parameters
time: Validity time of the local user, in the format HH:MM:SS-MM/DD/YYYY,
HH:MM:SS-YYYY/MM/DD, MM/DD/YYYY-HH:MM:SS, or YYYY/MM/DD-HH:MM:SS. HH:MM:SS
indicates the time, where HH ranges from 0 to 23, and MM and SS range from 0 to 59. MM/DD/YYYY
or YYYY/MM/DD indicates the date, where YYYY ranges from 2000 to 2035, MM ranges from 1 to 12,
and the range of DD depends on the month. Except for the zeros in 00:00:00, leading zeros can be
omitted. For example, 2:2:0-2008/2/2 equals 02:02:00-2008/02/02.
Description
Use validity-date to set the validity time of a local user.
Use undo validity-date to remove the configuration.
By default, a local user has no validity time and no time validity checking is performed.
When some users need to access the network temporarily, create a guest account and specify a validity
time and an expiration time for the account to control the validity of the account. When a user uses the
guest account for local authentication and passes the authentication, the firewall checks whether the
current system time is between the validity time and the expiration time. If so, it permits the user to access
the network. Otherwise, it denies the access request of the user.
Related command: expiration-date.
Examples
# Set the validity time of user abc to 12:10:20 on April 30, 2008, and the expiration time to 12:10:20
on May 31, 2008.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] validity-date 12:10:20-2008/04/30
[Sysname-luser-abc] expiration-date 12:10:20-2008/05/31
RADIUS configuration commands
accounting-on enable
Syntax
accounting-on enable [ interval seconds | send send-times ] *
undo accounting-on enable
View
RADIUS scheme view
Default level
2: System level
Parameters
seconds: Time interval for retransmitting an accounting-on packet in seconds, ranging from 1 to 15. The
default setting is 3 seconds.