HP VPN Firewall Appliances Access Control Command Reference

169
[Sysname] local-user abc
[Sysname-luser-abc] access-limit 5
Related commands
display local-user
authorization-attribute (local user view/user group view)
Use authorization-attribute to configure authorization attributes for the local user or user group. After the
local user or a local user of the user group passes authentication, the device assigns these attributes to
the user.
Use undo authorization-attribute to remove authorization attributes and restore the defaults.
Syntax
authorization-attribute { acl acl-number | callback-number callback-number | idle-cut minute | level
level | user-role { guest | guest-manager | security-audit } | vlan vlan-id | work-directory
directory-name } *
undo authorization-attribute { acl | callback-number | idle-cut | level | user-role | vlan |
work-directory } *
Default
No authorization attribute is configured for a local user or user group.
Views
Local user view, user group view
Default command level
3: Manage level
Parameters
acl acl-number: Specifies the authorization ACL. The ACL number is in the range of 2000 to 5999. After
passing authentication, a local user is authorized to access the network resources specified by this ACL.
callback-number callback-number: Specifies the authorized PPP callback number. The callback-number
argument is a case-sensitive string of 1 to 64 characters. After a local user passes authentication, the
device uses this number to call the user.
idle-cut minute: Sets the idle timeout period. With the idle cut function enabled, an online user whose idle
period exceeds the specified idle timeout period is logged out. The minute argument indicates the idle
timeout period in the range of 1 to 120 minutes.
level level: Specifies the user level, which can be 0 for visit level, 1 for monitor level, 2 for system level,
and 3 for manage level. A smaller number means a lower level. This parameter determines the command
level for login users whose user interfaces perform AAA authentication. By default, the user level is 0, and
users can use only commands of level 0 after login.
user-role: Specifies the role for the local user. This keyword is available in only local user view. Users
playing different roles can access different levels of commands. If you specify no role for a local user, the
access right of the user after login depends on other authorization attributes. Supported roles include:
• guest: A guest user account is usually created through the Web interface.
• guest-manager: An authenticated guest manager can manage guest user accounts on Web pages.