50-6
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 50 Configuring Hostname, Resources, User Accounts, and SLAs
Configuring User Accounts
Configuring User Accounts
The User Accounts page lets you manage the Local user database. User accounts in the Local database
can be used in conjunction with the Authentication, Authorization, Accounting (AAA) functions to
determine “who is allowed to do what” on a device. Refer to About AAA on Security Devices, page 47-1
for more information.
The table on this page lists all currently defined Local user accounts, showing for each, the name of the
user and the assigned privilege level. For a detailed explanation of these fields, see Add/Edit User
Account Dialog Boxes, page 50-7.
•To add a user account, click the Add Row button.
ASDM Sets the limit for ASDM management sessions (the default is 5). You can set
the limit as an absolute value by entering an integer between 1 and 5, or you
can enter a percentage between 3.0 and 15.0. The system allows a maximum
of 80 concurrent sessions divided between all contexts.
ASDM sessions use two HTTPS connections: one for monitoring that is
always present, and one for making configuration changes that is present
only when you make changes. For example, the system limit of 80 ASDM
sessions represents a limit of 160 HTTPS sessions, divided between all
contexts.
Other VPN Sets the limit for Site-to-site VPN sessions. You cannot oversubscribe this
resource; all context assignments combined cannot exceed the model limit.
The sessions you assign for this resource are guaranteed to the context.
Other VPN Burst Sets the limit for the number of site-to-site VPN sessions allowed beyond the
amount assigned to a context with vpn other. For example, if your model
supports 5000 sessions, and you assign 4000 sessions across all contexts
with vpn other, then the remaining 1000 sessions are available for other vpn
burst. Unlike other vpn, which guarantees the sessions to the context, other
vpn burst can be oversubscribed; the burst pool is available to all contexts on
a first-come, first-served basis.
All Resources Limit Sets a limit for all resources. If you also set the limit for a specific resource,
then that limit overrides the limit you set here for all resources. You can set
the limit as a percentage, or as unlimited by setting the value to 0 (when
percent is not checked). You cannot set any other absolute value. You can
assign more than 100 percent if you want to oversubscribe the device.
Contexts Tab
Available Contexts Lists all contexts available for class assignments; contexts which already
have class assignments are not displayed.
Select one or more contexts and click the >> button to add the contexts to the
Selected Contexts list.
Selected Contexts Lists all contexts assigned to this class.
Select one or more contexts and click the << button to return the contexts to
the Available Contexts list.
Table50-2 Add and Edit Resource Dialog Boxes (Continued)
Element Description