user

This command configures the Local Users table, which configures management user accounts.

Syntax

(config-system)# user <Username> 
(user-<Username>#

Command

Description

block-duration <Time>

Defines the duration (in seconds) for which the user is blocked when the user exceeds a user-defined number of failed login attempts.

cli-session-limit <Max. Sessions>

Defines the maximum number of concurrent CLI sessions logged in with the same username-password.

password <displayed password>|<Enter key for hidden password>

Defines the user's password.

■

To show the password as you type, type the password command and then the password.

■

To hide the password as you type, type the password command, press the Enter key, and then type the password.

Note:

■

For obscured (encrypted) passwords, do one of the following:

✔

After typing the password command, paste (or type) the obscured password, and then type the obscured command, for example:

(config-system)# user John
Configure new user John
(user-John)# password
db6bce85685c6634f6115456a083ea753f6d17bc228ffa3ea306a4ec6f7f66e405b3904b 8476465cca64 962af33cafd1 obscured

To generate an encrypted password, configure the password through the Web interface, and then save the device's configuration to an ini file. As the ini file displays passwords in obscured format by default, simply copy-and-past the encrypted password from the ini file into the CLI.

✔

After typing the password command, press Enter, and then type the password, which is hidden when you type. This method is typically used when you don't have an obscured password; the device converts your typed password (e.g., "1234") into an obscured password. For example:

(config-system)# user John
Configure new user John
(user-John)# password 

Please enter hidden password (press CTRL+C to exit):

■

To enforce password configuration in obscured format, use the command obscure-password-mode on.

■

The device displays all configured passwords as encrypted (obscured) in its CLI outputs.

password-age <Days>

Defines the validity duration (in days) of the password.

privilege {admin|sec-admin|user}

Defines the user's privilege level.

public-key

Defines a Secure Socket Shell (SSH) public key for RSA public-key authentication (PKI) of the remote user when logging into the device's CLI through SSH.

session-limit <Max. Sessions>

Defines the maximum number of concurrent Web sessions logged in with the same username-password.

session-timeout <Number>

Defines the duration (in minutes) of inactivity of a logged-in user, after which the user is automatically logged off the Web session.

status {failed-login|inactivity|new|valid}

Defines the status of the user.

Command Mode

Privileged User

Example

This example configures a new user "John" and hides the password when typed:

(config-system)# user John
Configure new user John
(user-John)# password 

Please enter hidden password (press CTRL+C to exit):
New password successfully configured!