CANOGA PERKINS 1502 Domain Management Module - Manual (Page 23)

EdgeAccess Universal Chassis System
Model 1502 Domain Management Module 3-13
Set General Security Parameters
General security parameters include values for passwords, lockout, and logout, which are basic to
maintaining security regardless of which security application runs on your network. To set values
for general parameters, access the Security Configuration screen and follow these steps:
1. At the Domain Management Module menu, type 2 , "Change Security & Passwords," and
press . The Change Security & Passwords menu appears.
2. At the Change Security & Passwords menu type 1 , "Security Configuration," and press
.
3. At the Security Configuration screen, type the number for an item and press , then
type a value or press to cycle through the options and press to select the
value or option.
• Minimum Length/Minimum Alpha Characters/Minimum Numeric Characters/Minimum
Punctuation Characters/Maximum Consecutive Character Types/Maximum Same Character:
Define characteristics of passwords; the range for all fields is from 0 through 15
• Allow Username in Password: Enable or disable the username appearing as or within the
password
• Password Expiration Time: Set how often in days, 1 through 365, that the passwords must be
reset; 0 = disabled
• Password Reuse Count: Set whether the password must be changed or can be used again
immediately; values are 0 (new password can be the same) or 1 (new password must be
different)
• Lockout After Failed Attempts: Set how many times, from 1 to 10, that a user can try to log
in before a lockout; 0 = disabled
• Lockout Type/Lockout Time: Set the type and length of lockout
• Hard requires another user with Supervisor access to unlock the account on the User
Accounts screen
• Timed requires that the user wait for Lockout time before trying again
• Lockout Time is from 0 (none) to 30 minutes
• Display Lockout Message/Lockout Message: Enable or disable and set the message, up to 30
characters, that appears at lockout
• Lockout Craft Port: Disable access to the serial port to prevent any unauthorized access; to
re-enable the craft port, run a Telnet session
• Inactivity Logout Time: Set the time, between 1 and 30 minutes, before automatic log-out
with no activity; 0 = disabled