R2511-HP MSR Router Series Security Configuration Guide(V5)

25
Ste
p
Command Remarks
7. Configure password
control attributes for the
local user.
• Set the password aging time:
password-control aging
aging-time
• Set the minimum password
length:
password-control length
length
• Configure the password
composition policy:
password-control composition
type-number type-number
[ type-length type-length ]
Optional.
By default, the local user uses
password control attributes of the user
group to which the local user belongs,
and uses the global setting for any
password control attribute that is not
configured in the user group. The
system provides the following default
global settings:
• A 90-day password aging time.
• A minimum password length of 10
characters.
• In non-FIPS mode, at least one
character type and at least one
character for each type.
• In FIPS mode, four character types
and at least one character for each
type.
In FIPS mode, the value for the
type-number argument must be 4.
8. Configure binding
attributes for the local user.
bind-attribute { call-number
call-number [ : subcall-number ] |
ip ip-address | location port
slot-number subslot-number
port-number | mac mac-address |
vlan vlan-id } *
Optional.
By default, no binding attribute is
configured for a local user.
9. Configure authorization
attributes for the local user.
authorization-attribute { acl
acl-number | callback-number
callback-number | idle-cut minute
| level level | user-profile
profile-name | user-role { guest |
guest-manager | security-audit }
| vlan vlan-id | work-directory
directory-name } *
Optional.
By default, no authorization attribute is
configured for a local user.
For PPP users, only acl,
callback-number, idle-cut, and
user-profile are supported.
For LAN and portal users, only acl,
idle-cut, user-profile, and vlan are
supported.
For SSH, terminal, and Web users,
only level is supported.
For FTP users, only level and
work-directory are supported.
For Telnet users, only level and
user-role is supported.
For other types of local users, no
authorization attribute is supported.
10. Set the validity time of the
local user.
validity-date time
Optional.
Not set by default.
11. Set the expiration time of
the local user.
expiration-date time
Optional.
Not set by default.