User authentication
Local users
LR54 User Guide
802
4. (Optional) Create a username alias for the user.
Because the name to create the user cannot contain special characters such as hyphens (-) or
periods (.), an alias allows the user to log in using a name that contains special characters. For
security purposes, if two users have the same alias, the alias will be disabled.
(config auth user new_user> username
username_alias
(config auth user new_user)>
5. Set the user's password. The password must be at least eight characters long and must
contain at least one uppercase letter, one lowercase letter, one number, and one special
character.
(config auth user new_user> password
pwd
(config auth user new_user)>
6. Configure login failure lockout settings:
The login failure lockout feature is enabled by default. To disable:
(config auth user new_user> lockout enable false
(config auth user new_user)>
a. Set the number of unsuccessful login attempts before the user is locked out of the device.
where
value
is any integer. The minimum value is
1
, and the default value is
5
.
b. Set the amount of time that the user is locked out after the number of unsuccessful login
attempts defined in
lockout tries
:
(config auth user new_user> lockout duration
value
(config auth user new_user)>
where
value
is any number of minutes, or seconds, and takes the format
number
{
m|s
}.
For example, to set
duration
to ten minutes, enter either
10m
or
600s
:
(config auth user new_user)> lockout duration 600s
(config auth user new_user)>
The minimum value is 1 second, and the maximum is 15 minutes. The default is 15
minutes.
7. Add groups for the user.
Groups define user access rights. See
for information about configuring
groups.
a. Add a group to the user. For example, to add the admin group to the user:
(config auth user new_user> add group end admin
(config auth user new_user)>
Note
Every user must be configured with at least one group.