Brocade BigIron RX Series Configuration Guide - Manual (Page 148)

70 BigIron RX Series Configuration Guide
53-1002484-04
Setting up local user accounts
3
NOTE
Before you can change a local user account using the Web Management Interface, you must enable
this capability by entering the CLI command "password-change any" at the global CONFIG level of the
CLI.
1. Log in to the Web Management Interface using a valid user name and password that has a
read-write privilege level.
2. Select Configure->System->Management->User Account.
3. User account information is listed in a table. Click on the Delete button next to the user
account whose password you wish to change.
4. Click on Add User Account.
5. Enter the user name in the Username field. The name cannot contain blanks.
6. Enter the password in the Password field. The password cannot contain blanks.
7. If necessary, select the management privilege level from the Privilege pulldown menu. By
default, the system assigns privilege level 5 (Read-Only), which allows the user to display
information but not to make configuration changes.
8. Click the Add button to save the change to the device’s running-config file.
9. Repeat step 3 to step 8 for each user account.
10. Select the Save link at the bottom of the dialog. Select Yes when prompted to save the
configuration.
The current and previous passwords are stored in the device’s running configuration file in
encrypted form.
BigIron RX# show run
username admin password .....
username admin history .....
username readonly privilege 5 password .....
username user1 privilege 4 password .....
In the running configuration file, the user’s previous passwords are displayed in encrypted form
following the history parameter.
Username, password and login rules
Regular password rules for username and password creation is the default condition for the
system. The following are the regular password rules:
• A minimum of one character is required to create a password.
• The last three passwords are stored in the CLI.
• Passwords do not expire.
• Users are not locked out (disabled) after failed login attempts.
If the enable strict-password-enforcement command is configured, then the following password
rules apply:
• Users must accept the message of the day when they log in.
• Users are locked out (disabled) if they fail to login in three login attempts.