Cisco Systems IPS 7.1 Home Security System User Manual


  Open as PDF
of 1042
 
4-30
Cisco Intrusion Prevention System CLI Sensor Configuration Guide for IPS 7.1
OL-19892-01
Chapter 4 Setting Up the Sensor
Configuring Authentication and User Parameters
Showing User Status
Note All IPS platforms allow ten concurrent log in sessions.
Use the show users command to view information about the username and privilege of all users logged
in to the sensor, and all user accounts on the sensor regardless of login status. An asterisk (*) indicates
the current user. If an account is locked, the username is surrounded by parentheses. A locked account
means that the user failed to enter the correct password after the configured attempts.
To show user information, follow these steps:
Step 1 Log in to the CLI using an account with administrator privileges.
Step 2 Verify the users logged in to the sensor.
sensor# show users
CLI ID User Privilege
* 13491 cisco administrator
sensor#
Step 3 Verify all users. The account of the user jsmith is locked.
sensor# show users all
CLI ID User Privilege
* 13491 cisco administrator
5824 (jsmith) viewer
9802 tester operator
sensor#
Step 4 To unlock the account of jsmith, reset the password.
sensor# configure terminal
sensor(config)# password jsmith
Enter New Login Password: ******
Re-enter New Login Password: ******
Configuring the Password Policy
As sensor administrator, you can configure how passwords are created. All user-created passwords must
conform to the policy that you set up. You can set login attempts and the size and minimum characters
requirements for a password. The minimum password length is eight characters. If you forget your
password, there are various ways to recover the password depending on your sensor platform.
Caution If the password policy includes minimum numbers of character sets, such as upper case or number
characters, the sum of the minimum number of required character sets cannot exceed the minimum
password size. For example, you cannot set a minimum password size of eight and also require that
passwords must contain at least five lowercase and five uppercase characters.