set system login

Use this command to create a new user login account, or to disable or enable an existing account. The S- K- and 7100-Series devices supports up to 32 user accounts, including the admin account, which cannot be disabled or deleted.

Syntax

set system login username [read-write | read-only | super-user] [enable | disable] [password {password | aging {days | disable | system}] [allowed-interval {HH:MM HH:MM}] [allowed-days {[Sun] [Mon] [Tue] [Wed] [Thu] [Fri] [Sat]}] [simultaneous-logins num] [local-only {yes | no}]

Parameters

`username`	Specifies a login name for a new or existing user. This string can be a maximum of 80 characters, although a maximum of 16 characters is recommended for proper viewing in the show system login display.
read-write \| read-only \| super-user	Specifies the access privileges for this user.
enable \| disable	Enables or disables the user account. The default admin (su) account cannot be disabled.
password `password`	(Optional) Specifies the encrypted password for this user account. This option is intended only for use in configurations generated by the show config command.
password aging `days` \| disable \| system	(Optional) Specifies password aging setting as: days – The number of days to age the password. Valid values are 1 - 365. disable – Aging is disabled for this password. system – The system password aging setting is used (default).
allowed-interval `HH:MM HH:MM`	(Optional) Specifies the start and end hour HH and minute MM time period for which access will be allowed for this user based upon 24 hour time.
allowed-days	(Optional) Specifies at least 1 and up to 7 days of the week for which access will be allowed for this user.
simultaneous-logins `num`	(Optional) Specifies the Number of simultaneous sessions allowed for the specified user account. Valid values are 0 - 5. Default value is 0 (no limit).
local-only	(Optional) Specifies the authentication scope for this user. Valid values: yes, no. yes specifies that authentication is only by way of the local user database even with RADIUS or TACACS+ configured. no specifies that authentication is by way of configured methods.

Defaults

allowed-interval: 00:00-24:00 (all hours allowed)
allowed-days: Sun, Mon, Tue, Wed, Thu, Fri, Sat (all days allowed)
local-only: no
password aging: system

Mode

All command modes, Super User.

Usage

Allowed interval and allowed days may be configured on any user account but are not enforced on super-user accounts.

Example

This example shows how to enable a new user account with the login name netops with super user access privileges:

System(su)->set system login netops super-user enable

Published May 2016prev | next

Email this topic

Print this page Print this page

Leave feedback Feedback