Page 77
Chapter 19 DLPs D200 to D299
DLP- D272 Change Node Security Policy on Multiple Nodes
DLP-D272 Change Node Security Policy on Multiple Nodes
| Purpose | This task changes the security policy for multiple nodes including idle user |
| | timeouts, user lockouts, password change, and concurrent login policies. |
| Tools/Equipment | None |
| Prerequisite Procedures | DLP-D60 Log into CTC, page 17-49 |
| Required/As Needed | As needed |
| Onsite/Remote | Onsite or remote |
| Security Level | Superuser |
| |
Step 1 | From the View menu, choose Go to Network View. |
Step 2 | Click the Provisioning > Security > Policy tabs. A read-only table of nodes and their policies appears. |
Step 3 | Click a node in the table that you want to modify, then click the Change button. |
Step 4 | If you want to modify the idle user timeout period, click the hour (H) and minute (M) arrows in the Idle |
| User Timeout area for the security level you want to provision: RETRIEVE, MAINTENANCE, |
| PROVISIONING, or SUPERUSER ONLY. The idle period time range is 0 and 16 hours, and 0 and 59 |
| minutes. The user is logged out after the idle user timeout period is reached. |
Step 5 | In the User Lockout area, you can modify the following: |
•Failed Logins Before Lockout—The number of failed login attempts a user can make before the user is locked out from the node. You can choose a value between 0 and 10.
•Manual Unlock by Superuser only—Allows a user with Superuser only privileges to manually unlock a user who has been locked out from a node.
•Lockout Duration—Sets the amount of time the user will be locked out after a failed login. You can choose a value between 0 and 10 minutes, and 0 and 55 seconds (in five-second intervals).
Step 6 In the Password Change area, you can modify the following:
•Prevent Reusing Last [ ] Passwords—Choose a value between 1 and 10 to set the number of different passwords the user must create before they can reuse a password.
•New Password must Differ from the Old Password—Choose the number of characters that must differ between the old and new password. The default number is 1.
•Cannot Change New Password for [ ] days—If checked, prevents users from changing their password for the specified period. The range is 20 to 95 days.
•Require Password Change on First Login to New Account—If checked, requires users to change their password the first time they log into their account.
Step 7 To require users to change their password at periodic intervals, check the Enforce Password Aging check box in the Password Aging area. If checked, provision the following parameters:
•Aging Period—Sets the amount of time that must pass before the user must change their password for each security level: RETRIEVE, MAINTENANCE, PROVISIONING, and SUPERUSER ONLY. The range is 20 to 95 days.
•Warning—Sets the number days the user will be warned to change their password for each security level. The range is 2 to 20 days.
Step 8 In the Other area, you can provision the following:
•Single Session Per User—If checked, limits users to one login session at one time.
| | Cisco ONS 15454 SDH Procedure Guide, R7.2 | | |
| | |
| October 2007 | | | 19-77 | |
| | | |
Contents
19-1
DLP-D201 Apply a Lock-On
Purpose
DLP-D202 Apply a Lockout
Required/As Needed
19-2
19-3
DLP-D203 Clear a Lock-On or Lockout
19-4
DLP-D205 Clean Fiber Connectors with Cletop
DLP-D207 Delete a Server Trail
DLP-D206 Clean the Fiber Adapters
Click the Provisioning Server Trails tabs
19-5
DLP-D209 Change External Controls Using the AIC-I Card
DLP-D208 Change External Alarms Using the AIC-I Card
Click the Provisioning External Alarms tabs
19-6
19-7
DLP-D210 Change AIC-I Card Orderwire Settings
Click the Provisioning Ether Ports tabs
DLP-D211 Provision CE-1000-4 Ethernet Ports
Click the Performance Ether Ports Statistics tabs
19-8
19-9
DLP-D212 Create a User Data Channel Circuit
Network view, click the Provisioning Overhead Circuits tabs
19-10
DLP-D214 Change the Service State for a Port
Click the Provisioning Card tabs
19-11
DLP-D215 Consolidate Links in Network View
19-12
1shows a network view with unconsolidated DCC and PPC links
Consolidated Links in Network View
19-13
19-14
DLP-D216 Change the STM-N Card ALS Maintenance Settings
19-15
Manual Restart for Test -Manually
19-16
DLP-D217 MS-SPRing Exercise Ring Test
Click the Provisioning MS-SPRing tabs
19-17
19-18
DLP-D220 Provision E-Series Ethernet Ports
DLP-D219 Provision a Low-Order Tunnel Route
Security
Click the Provisioning Port tabs
19-20
Click the Provisioning Vlan tabs
19-21
Setting Description
19-22
DLP-D222 Provision G-Series Ethernet Ports
Click the Performance Statistics tabs
19-23
DLP-D223 Download an Alarm Severity Profile
19-24
DLP-D224 Adjust the Java Virtual Memory Heap Size
Click OK
19-25
DLP-D225 Enable Alarm Filtering
19-26
DLP-D227 Disable Alarm Filtering
DLP-D229 View Circuits on a Span
19-27
DLP-D230 Change a Circuit State
19-28
DLP-D231 Edit a Circuit Name
19-29
DLP-D232 Change Active and Standby Span Color
19-30
Click Reset to Defaults
DLP-D233 Edit Sncp Circuit Path Selectors
19-31
Selecting Single Roll Attributes
19-32
Selecting a New Endpoint
19-33
Viewing the Rolls Tab
19-34
19-35
Click Finish
19-36
10 Selecting Dual Roll Attributes
19-37
19-38
11 Setting Roll Routing Preferences
19-39
19-40
Click the Circuits tab
19-41
19-42
19-43
DLP-D239 Delete a Roll
DLP-D240 Cancel a Roll
Click the Circuits Rolls tabs
19-44
19-45
DLP-D241 Clear an MS-SPRing Manual Ring Switch
19-46
DLP-D242 Create an MS-SPRing on a Single Node
19-47
DLP-D243 Create a Vlan
12 Reinitialization Tool
19-48
19-49
19-50
19-51
DLP-D246 Provision E-Series Ethernet Card Mode
19-52
Click the Maintenance Protection tabs
DLP-D247 Change an STM-N Card
19-53
DLP-D249 Provision IP Settings
DLP-D248 Delete VLANs
19-54
Click the Provisioning Network General tabs
19-55
19-56
Active TCC2/TCC2P LEDs Standby TCC2/TCC2P LEDs
Click the No Authentication button
DLP-D250 Set Up or Change Open Shortest Path First Protocol
Type-ChooseSimple Password
19-57
19-58
19-59
DLP-D251 Set Up or Change Routing Information Protocol
19-60
DLP-D254 TCC2/TCC2P Card Active/Standby Switch Test
19-61
DLP-D255 Cross-Connect Card Side Switch Test
19-62
Click the Maintenance Cross-Connect tabs
DLP-D256 View Ethernet Statistics PM Parameters
19-63
DLP-D257 View Ethernet Utilization PM Parameters
Click the Performance Utilization tabs
19-64
DLP-D258 View Ethernet History PM Parameters
19-65
DLP-D260 Set Auto-Refresh Interval for Displayed PM Counts
19-66
DLP-D261 Refresh PM Counts for a Different Port
DLP-D262 Filter the Display of Circuits
19-67
19-68
19-69
J1 Function Cards
19-70
19-71
19-72
DLP-D265 Change the Login Legal Disclaimer
19-73
DLP-D266 Change IP Settings
19-74
DLP-D268 Apply a Custom Network View Background Map
19-75
DLP-D269 Enable Dialog Box Do-Not-Display Option
DLP-D271 Change Node Security Policy on a Single Node
19-76
19-77
DLP-D272 Change Node Security Policy on Multiple Nodes
19-78
DLP-D273 Modify Snmp Trap Destination
19-79
DLP-D303 Initiate an MS-SPRing Force Ring Switch task on
19-80
Change Card
19-81
DLP-D295 Perform a Manual Span Upgrade on an Sncp
19-82
19-83
19-84
DLP-D298 Check the Network for Alarms and Conditions
19-85
DLP-D299 Initiate an MS-SPRing Span Lockout
19-86