Specifying Other Security Features

Login Password Definition Example

The following example shows how to define TOTAL as the login password:

Local> CHANGE SERVER LOGIN PASSWORD "TOTAL"

or

Local> CHANGE SERVER LOGIN PASSWORD

Password> TOTAL (not echoed)

VERIFICATION> TOTAL (not echoed)

Local>

You must enable the PASSWORD characteristic at the port level. The following shows how to enable PASSWORD at ports 5, 6, and 7:

Local> CHANGE PORT 5,6,7 PASSWORD ENABLED

Once the PASSWORD characteristic is enabled at a port, the login prompt (#) appears at the port device accompanied by a beep signal when the user logs in to the port. The user must enter the login password to gain access to the port.

You can change the login password, but you cannot clear the password. If you specify NONE or type a null string ("") on the command line, you receive an error message. To reset the default ACCESS, specify "ACCESS" on the command line or ACCESS at the Password> prompt.

Specifying PASSWORD LIMIT

The PASSWORD LIMIT characteristic specifies the following:

∙The number of times that a port user with the PASSWORD and/or AUTHENTICATION port characteristic enabled can incorrectly enter the login password before the port is automatically logged out. If the port user fails to type the correct password within the number of allowed attempts, that user is not allowed to complete the login sequence for 1 minute. After 1 minute, the user can attempt to log in again.

∙The number of times that a port user can incorrectly enter the privileged password before the port is automatically logged out by the access sever.

∙For services that are password protected, the number of times that a user is prompted for the correct password before a connection request is denied.

The value must be in the range of 0 to 10 attempts. If you specify 0, no attempts are allowed. The factory-set default is 3.

22-38 Managing Access Server Security