...
See Set Command Parameters for parameter descriptions.
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> accountManagement accountAging accountAgingPeriod <30-180> state <disabled | enabled> bruteForceAttack allowAutoUnlock <disabled | enabled> consecutiveFailedAttemptAllowed <1-10> state <disabled | enabled> unlockTime <30-3600 seconds> maxSessions <1-5> passwordAging passwordAgingPeriod <30-180> passwordExpiryWarningPeriod <3-14> state <disabled | enabled> sessionIdleTimeout idleTimeout <1-120> state <disabled | enabled> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> auditLogState <disabled | enabled> banner <system |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> banner <system name> name> ackBanner <disable | enable> bannerText <text> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> cliSetWarningSupport <disabled | enabled> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> contact <contact_info>
|
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> dod cliAccess <disabled | enabled> mode <disabled | enabled> pmAccess <disabled | enabled> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> dspMismatchAction <preserveCapacity | preserveRedundancy>
|
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> externalAuthenticationEnabled <false | true>
|
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> externalAuthenticationEnabled <false | true> fips-140-2 mode <disabled | enabled> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> localAuthenticationEnabled <false | true> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> location <location_info> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> passwordRules maximumRepeatingCharsCount <#> minimumDiffWithOldPassword <#> minimumLength <#> minimumNumberOfDigits <#> minimumNumberOfLowercaseChars <#> minimumNumberOfOtherChars <#> minimumNumberOfUppercaseChars <#> passwordHistoryDepth <#> |
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> rest state rest state <disabled | enabled> standbyServerState <disabled | enabled> utilMonitorStatsInterval <#> utilMonitorStatsNumOfPastInterval <#> |
See Request Command Parameters for parameter descriptions.
Multiexcerpt | |
---|---|
MultiExcerptName | adminRequestSyntax
Code Block | |||
---|---|---|---|
| none
| ||
% requestset system admin <SYSTEM NAME>identify durationstandbyServerState<0-255 seconds> loadConfig allowOldVersion <no <disabled |yes> filename reGenerateSshRsaKeys reKeyConfdEncryptionKeys removeSavedConfig fileName <filename> restart revertSoftwareUpgrade revertMode <forced | normal> saveConfig fileNameSuffix <suffix> softReset switchover zeroizePersistenKeys |
...
enabled>
|
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> utilMonitorStatsInterval <#>
|
Code Block | ||
---|---|---|
| ||
% set system admin <SYSTEM NAME> utilMonitorStatsNumOfPastInterval <#> |
See Request Command Parameters for parameter descriptions.
Multiexcerpt | |||||
---|---|---|---|---|---|
| |||||
|
Anchor | ||||
---|---|---|---|---|
|
Caption | ||||
---|---|---|---|---|
| ||||
|
Div | ||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||||||||
| ||||||||||||||||||||||||
Div | ||||||||||||||||||||||||
| ||||||||||||||||||||||||
Caption | | |||||||||||||||||||||||
| ||||||||||||||||||||||||
Parameter | Length/Range | Description |
N/A | Use this object |
accountManagement
Use this feature to manage system level account and password related settings.
accountAging
– Use this parameter to enable account aging, and to specify the account expiration duration.accountAgingPeriod
– The number of days to elapse, after which the account is locked if left unused (range: 30-180 / default = 30).state
– Set flag to "enabled" to enable account aging system-wide.disabled
enabled
(default)bruteForceAttack
– Configuration for defense against brute force OAM password guessing attempts.allowAutoUnlock
– Enable Auto Unlock of an account blocked due to consecutive wrong password attempts.
disabled
(default)enabled
consecutiveFailedAttemptAllowed
– Number of consecutive failed login attempts allowed before account is locked. As a safety measure, the system will not lock out the last/only active Administrator user on
Spacevars | ||
---|---|---|
|
Note |
---|
You must first set |
state
– Enable/disable defense against brute force OAM password guessing attempts
disabled
(default) enabled
unlockTime
– If allowAutoUnlock
flag is enabled, this parameter specifies the time (in seconds) to elapse before a locked account automatically unlocks. (range: 30-3600 / default = 30)
maxSessions
– Maximum number of simultaneous sessions allowed per user (range: 1-5 / default = 2).passwordAging
– password expiration related configuration.passwordAgingPeriod
– The number of days to elapse, after which a password expires (range: 30-180 / default = 90).
passwordExpiryWarningPeriod
– The number of days prior to the password expiry date on which the user receives a warning to change the password (range: 3-14 / default = 12).
state
– Use this flag to enable/disable password aging feature.
disabled
enabled
(default)sessionIdleTimeout
– Session idle timeout related configuration.idleTimeout
– The amount of idle time, in minutes, to elapse before ending a session due to inactivity (range: 1-120 / default = 10).state
– To use this feature, set this flag to "enabled".disabled
enabled
(default)auditLogState
N/A
Use this flag to specify the management audit log state.
disabled
enabled
(default)banner
1-23
Use this parameter to customize the post-login banner from EMA and CLI applications.
ackBanner
– Enable flag to require user to acknowledge (accept) the banner before gaining access to the system each time the user logs into the system.disabled
(default)enabled
bannerText
– Use this parameter to specify the banner text to display when users login to EMA and CLI applications.Note |
---|
"Field Service" and "Operator" user types are not allowed to change the Login Banner configuration. |
cliSetWarningSupport
N/A
When this flag is enabled, warning prompts are configured for the "set" command.
disabled
enabled
(default)contact
N/A
Use parameter to specify system contact information. (default is "Unknown")
dod
Use this object to enable DoD mode, and to enable/disable CLI and/or EMA access for temporary troubleshooting and diagnostics.
cliAccess
– Use this flag to temporarily enable CLI for troubleshooting and diagnostic while the SBC is in DoD mode.disabled
(default)enabled
mode
– Use this flag to enable/disable DoD Mode.disabled
(default)enabled
pmAccess
– Use this flag to temporarily enable EMA's Platform Mode for troubleshooting and diagnostic while the SBC is in DoD mode.disabled
(default)enabled
Warning |
---|
Enabling CLI and/or EMA for DoD mode lowers the security posture of the SBC. Remember to disable CLI and PM access once troubleshooting and/or diagnostics is completed. |
dspMismatchAction
Use this parameter to specify the action to take if a DSP mismatch is detected between the active and standby servers.
preserveCapacity
– The Active
Spacevars | ||
---|---|---|
|
Note |
---|
If a switchover occurs, calls using the extra, non-matching DSP capacity on Active are not protected during switchover (i.e. partial redundancy). |
preserveRedundancy
(default) – The Active automatically triggers a graceful dry-up in an attempt to align DSP hardware capabilities. Once dry-up completes, the Active SBC uses the protected, matching DSP capacity to preserve redundancy.
Note |
---|
During the dry-up period, active calls using the extra, non-matching DSP capacity are not protected in the event that a switchover occurs before the dry up completes. |
externalAuthenticationEnabled
N/A
The confd CLI user information stored on remote RADIUS server is available for authentication.
false
(default) true
fips-140-2 mode
Use this object to enable FIPS-140-2 mode.
disabled
(default)enabled
Note |
---|
Once fips-140-2 mode is enabled, it cannot be 'disabled' through the configuration. A fresh software installation is required to set the FIPS-140-2 mode back to 'disabled'. |
For complete details of configuring the
Spacevars | ||
---|---|---|
|
localAuthenticationEnabled
N/A
The confd CLI user information stored locally is available for authentication.
false
true
(default)location
N/A
Specifies the physical location of the system.
passwordRules
N/A
The rules implementing confd user password policy.
maximumRepeatingCharsCount
– Maximum number of consecutive repeating characters in the password. (range: 3-16 / default = 3).minimumDiffWithOldPassword
– The minimum differences between the old and the new passwords (range 1-8 / default - 4).minimumLength
– Minimum number of characters that should be present in the password. (range: 8-24 / default = 8)minimumNumberOfDigits
– Minimum number of digits that should be present in the password. (range: 0-16 / default = 1)minimumNumberOfLowercaseChars
– Minimum number of lower case characters that should be present in the password. (range: 0-16 / default = 1)minimumNumberOfOtherChars
–-Minimum number of non-alpha-numeric characters that should be present in the password. (range: 0-16 / default = 1)minimumNumberOfUppercaseChars
– Minimum number of upper case characters that should be present in the password. (range: 0-16 / default = 1)passwordHistoryDepth
–The number of latest passwords that should be prevented from re-use. (range: 0-10 / default = 4)rest
Enable this flag to allow
Spacevars | ||
---|---|---|
|
disabled
(default)enabled
standbyServerState
N/A
Use this flag to manually enable or disable standby server if the active server fails.
disabled
enabled
(default)utilMonitorStatsInterval
5-60
Specifies time interval for system resource monitoring statistics. This parameter defines the range of timer interval in minutes used by configuration management for measuring the statistics of certain resources. (default = 15).
utilMonitorStatsNumOfPastInterval
1-12
to enable DoD mode, and to enable/disable CLI and/or EMA access for temporary troubleshooting and diagnostics.
| ||||||||||
dspMismatchAction | N/A | Use this parameter to specify the action to take if a DSP mismatch is detected between the active and standby servers.
| ||||||||
| N/A | The confd CLI user information stored on remote RADIUS server is available for authentication.
| ||||||||
fips-140-2 mode | N/A | Use this object to enable FIPS-140-2 mode.
For complete details of configuring the
| ||||||||
| N/A | The confd CLI user information stored locally is available for authentication.
| ||||||||
| N/A | Specifies the physical location of the system. | ||||||||
| N/A | The rules implementing confd user password policy.
| ||||||||
rest | N/A | Enable this flag to allow
| ||||||||
| N/A | Use this flag to manually enable or disable standby server if the active server fails.
| ||||||||
| 5-60 | Specifies time interval for system resource monitoring statistics. This parameter defines the range of timer interval in minutes used by configuration management for measuring the statistics of certain resources. (default = 15).
| ||||||||
| 1-12 | The number of past intervals that can be configured for retrieving the statistics data. (default = 4). |
Caption | ||||||
---|---|---|---|---|---|---|
| ||||||
|
Div | |||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||||||||||||||||
|
Anchor | ||||
---|---|---|---|---|
|
Multiexcerpt | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Div | class | pdf6pttext|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
The following example displays system administrative information:
...