OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Managing Switch User Accounts
Overview of User Accounts
Default User Settings
The default user account on the switch is used for storing new user defaults for privileges and profile
information. This account does not include a password and cannot be used to log into the switch.
At the first switch startup, the default user account is configured for:
• No read or write access.
• No SNMP access.
Any new users created on the switch will inherit the privileges of the default user unless the user is configured
with specific privileges.
The default user settings may be modified. Enter the user command with default as the user name. Note
that the default user may only store default functional privileges.
The following example modifies the default user account with read-write access to all CLI commands:
-> user default read-write all
In this example, any new user that is created will have read and write access to all CLI commands (unless
a specific privilege or SNMP access is configured for the new user).
Account and Password Policy Settings
The switch includes global password settings that are used to implement and enforce password complexity
when a password is created, modified, and used. These user-configurable settings apply the following
password requirements to all user accounts configured for the switch:
• Minimum password size.
• Whether or not a password can contain the account username.
• Minimum password character requirements.
• Password expiration.
• Password history.
• Minimum password age.
In addition to global password settings, the switch also includes global user lockout settings that determine
when a user account is locked out of the switch and the length of time the user account remains
locked.
See “Configuring Password Policy Settings” on page 6-10 and “Configuring Global User Lockout
Settings” on page 6-13 for more information.
How User Settings Are Saved
Unlike other settings on the switch, user settings configured through the user and password commands
are saved to the switch configuration automatically. These settings are saved in real time in the local user
database.
At bootup, the switch reads the database file for user information (rather than the vcboot.cfg file).
OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 6-7