HP VPN Firewall Appliances Access Control Command Reference

175
Parameters
time: Specifies the expiration time of the local user, in the format HH:MM:SS-MM/DD/YYYY,
HH:MM:SS-YYYY/MM/DD, MM/DD/YYYY-HH:MM:SS, or YYYY/MM/DD-HH:MM:SS. HH:MM:SS
indicates the time, where HH is in the range of 0 to 23, and MM and SS are in the range of 0 to 59.
MM/DD/YYYY or YYYY/MM/DD indicates the date, where YYYY is in the range of 2000 to 2035,
MM is in the range of 1 to 12, and the range of DD depends on the month. Except for the zeros in
00:00:00, leading zeros can be omitted. For example, 2:2:0-2008/2/2 equals
02:02:00-2008/02/02.
Usage guidelines
For temporary network access requirements, create a guest account, and specify a validity time and an
expiration time for the account to control the validity of the account. When a user uses the guest account
for local authentication and passes the authentication, the access device checks whether the current
system time is between the validity time and the expiration time. If it is, the device permits the user to
access the network. Otherwise, the device denies the access request of the user.
Examples
# Set the expiration time of user abc to 12:10:20 on May 31, 2008.
<Sysname> system-view
[Sysname] local-user abc
[Sysname-luser-abc] expiration-date 12:10:20-2008/05/31
Related commands
validity-date
group
Use group to assign a local user to a user group.
Use undo group to restore the default.
Syntax
group group-name
undo group
Default
A local user belongs to the system default user group system.
Views
Local user view
Default command level
3: Manage level
Parameters
group-name: User group name, a case-insensitive string of 1 to 32 characters.
Examples
# Assign local user 111 to user group abc.
<Sysname> system-view
[Sysname] local-user 111
[Sysname-luser-111] group abc