Cisco PIX 525 Especificaciones descargar pdf (Pagina 441)

100

101

25-27

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 25 Configuring Tunnel Groups, Group Policies, and Users

Configuring Users

Viewing the Username Configuration

To display the configuration for all usernames, including default values inherited from the group policy,

enter the all keyword with the show running-config username command, as follows:

hostname# show running-config all username

If you omit the all keyword, only explicitly configured values appear in this list. In this example, the

usernames are “testuser” and “oliverw”. The configuration for all configured users, including the

inherited values is as follows:

username testuser password 12RsxXQnphyr/I9Z encrypted privilege 15

username testuser attributes

vpn-group-policy testing

vpn-access-hours value averylongtime

vpn-simultaneous-logins 4

vpn-idle-timeout 30

vpn-session-timeout none

vpn-filter value tunneled

no vpn-framed-ip-address

group-lock value test

username cisco password 3USUcOPFUiMCO4Jk encrypted privilege 15

username newuser nopassword privilege 15

Configuring Specific Users

To configure specific users, you assign a password (or no password) and attributes to a user using the

username command, which enters username mode. Any attributes that you do not specify are inherited

from the group policy.

The internal user authentication database consists of the users entered with the username command. The

enter the username command in global configuration mode. To remove a user, use the no version of this

command with the username you want to remove. To remove all usernames, use the clear configure

username command without appending a username.

Setting a User Password and Privilege Level

Use the username command to assign a password and a privilege level for a user. You can, instead, enter

the nopassword keyword to specify that this user does not require a password. If you do specify a

password, you can specify whether that password is stored in an encrypted form.

The optional privilege keyword lets you set a privilege level for this user. Privilege levels range from 0

(the lowest) through 15. System administrators generally have the highest privilege level. The default

level is 2.

hostname(config)# username

name

{nopassword | password

password

[encrypted]} [privilege

priv_level

]}

hostname(config)# no username [

name

]

1 2 ... 436 437 438 439 440 441 442 443 444 445 446 ... 603 604

Comentarios a estos manuales

Sin comentarios

Cisco PIX 525 Especificaciones Pagina 441

Comentarios a estos manuales