Chapter 3. Command Reference

add username

adds a user account to the system. You can add the password and role for the account with the following flags.

-password password

enters a password for the account. If you do not include the password on the command line, you will be prompted for the password after entering the configure terminal user add command.

Note: Do not use quotation marks in passwords. Quotation marks are treated differently depending on how they are entered and where they are placed within a password and may lead to confusion when attempting to log on to the device.

-role < operator admin super-user > assigns a user access role to the new user account.

enable name

enables users who have been disabled by lockout or expiration. no enable name disables a user account.

modify name

modifies an existing user account.

[-password password]

enters a password for the account. If you do not include the password on the command line, you will be prompted for the password after entering the configure terminal user modify command.

-role < operator admin super-user > assigns a user access role to the user account.

options

configures the security options for all user accounts on the device. If you use the conf t user options command without any parameters, it displays the current settings.

attempt-action

controls how an device handles an account after the max-attempts setting is exceeded. An attempt is recorded when an invalid password entry is submitted.

disable

disables the account when max-attemptsis exceeded. A super-user must re-enable the account with the conf t user enable command.

lockout

locks out an account for the period of time specified in lockout-periodwhen max-attemptsis exceeded.

expire-action

configures the actions that the device takes on an account when a password expires.

68 X Family CLI Reference V 2.5.1