Enhancing access management

By default,

The macro unmigrated-inline-wiki-markup from Confluence is no longer available.

components have the following access-management features:

The device authenticates and authorizes users via a local mechanism.
Users must log on with a user name and a password. By default, there is no penalty for repeated unsuccessful logon attempts. The Security user can set up a restriction on logon attempts in the Account Policies page from the Administration tab.
Inactive accounts remain viable by default. The Security user can modify account viability.
Users can use the administrator-created passwords and never change them.
Passwords can be short, simple, and, therefore, vulnerable to guessing or brute-force attacks.
To prevent unauthorized persons from accessing the web interface of this device, a user with the Security role can enable enhanced account and password security.

Note

To manage security via the configuration file, see Managing-security-configuration.

Related topics