Local User Configuration

show local user brief show local user brief \[command] show local user brief \[purpose] display local user information \[view] system view \[use cases] sonic# show local user brief user online blocked login ip login time admin yes no nov 3 17 24 admin yes no 150 1 0 1 nov 4 23 20 test no yes show local user brief show local user brief this command display description table this command display description table fields description online whether the current user is online or not yes user online no user is not online blocked whether the current user is locked out or not yes locked no unlocked login ip the ip address used by the current user to log in to the device, if the user is online and the login ip is empty, it means that the user is logging in through the serial port login time current user login time to the device show local user block conf show local user block conf \[command] show local user block conf \[purpose] displays the device's configured method for processing successive incorrect password entries by the user \[view] system view \[use cases] sonic# show local user block conf + + + \| parameter | value | +=============+=========+ \| retry count | 5 | + + + \| block time | 5 | + + + show local user blocked show local user blocked \[command] show local user blocked \[purpose] show locked users \[view] system view \[use cases] sonic# show local user blocked login failures latest failure from test 8 11/05/16 00 42 56 150 1 0 1 show local user password control show local user password control \[command] show local user password control \[purpose] show user password complexity configuration \[view] system view \[use cases] sonic# show local user password control + + + + + + + |passwd contro | minlen |min lowercase |min uppercase | min digits | min special chars | +================+=======+==============+==============+============+================+ \| disable | 8 | 0 | 0 | 0 | 0 | + + + + + + + show local user privilege show local user privilege \[command] show local user privilege \[purpose] show local user privilege assignment \[view] system view \[use cases] sonic# show local user privilege + + + \| user | privilege | +========+=============+ \| aaa | none | + + + \| bbb | config | + + + \| admin | sys admin | + + + local user name local user name passwd \[command] local user name name passwd password no local user \[purpose] create local user \[parameter] parameter description name username password password \[view] system configuration view \[use cases] sonic(config)# local user name test passwd testuser local user name privilege local user name privilege \[command] local user name name privilege {none|show|config|sys admin} \[purpose] configure local user privileges, default is none \[parameter] parameter description none has login privileges show has view only privileges, no configuration privileges, can execute ping/traceroute operation commands config has configuration privileges, but does not include upgrade, reboot, add/delete user commands sys admin has highest privileges \[view] system configuration view \[use cases] sonic(config)# local user name aaa privilege level config local user block time local user block time \[command] local user block time time \[purpose] configure local users to continuously enter incorrect password account lockout time \[parameter] parameter description time value range 1 65535, unit min \[view] system configuration view \[notes] locked for 5 minutes by default \[use cases] sonic(config)# local user block time 5 local user retry count local user retry count \[command] local user retry count count no local user retry count \[purpose] configure a limit on the number of consecutive incorrect password entries for local users \[parameter] parameter description count value range 2 65535 \[view] system configuration view \[notes] by default, 5 attempts are allowed \[use cases] sonic(config)# local user retry count 5 local user password control enable local user password control enable \[command] local user password control enable no local user password control enable \[purpose] configure local user password complexity function \[view] system configuration view \[notes] to prevent passwords from being cracked by malicious users through brute force attacks, you can configure the complexity requirements for local user passwords \[use cases] sonic(config)# local user password control enable local user password control min len local user password control min len \[command] local user password control min len length no local user password control min len \[purpose] set the minimum length for local user passwords \[parameter] parameter description length the range of value is 8 64, default value is 8 \[view] system configuration view \[use cases] sonic(config)# local user password control min len 10 local user password control min lowercase local user password control min lowercase \[command] local user password control min lowercase num no local user password control min lowercase \[purpose] set the minimum lowercase letter requirement for local user passwords \[parameter] parameter description num the range of value is 1 10, default value is 0 \[view] system configuration view \[use cases] sonic(config)# local user password control min lowercase 1 local user password control min uppercase local user password control min uppercase \[command] local user password control min uppercase num no local user password control min uppercase \[purpose] set the minimum number of uppercase letters required for local user passwords \[parameter] parameter description num the range of value is 1 10, default value is 0 \[view] system configuration view \[use cases] sonic(config)# local user password control min uppercase 1 local user password control min digits local user password control min digits \[command] local user password control min digits num no local user password control min digits \[purpose] set the minimum number of digits required in local user passwords \[parameter] parameter description num the range of value is 1 10, default value is 0 \[view] system configuration view \[use cases] sonic(config)# local user password control min digits 1 local user password control min special chars local user password control min special chars \[command] local user password control min special chars num no local user password control min special chars \[purpose] set the minimum number of special characters required in local user passwords \[parameter] parameter description num the range of value is 1 10, included !@#$%^ =+ /, \[view] system configuration view \[use cases] sonic(config)# local user password control min special chars 1 telnet max session telnet max session \[command] telnet max session count \[purpose] set the maximum number of telnet user sessions \[parameter] parameter description count the range of value is 1 100, default value is 10 \[view] system configuration view \[use cases] sonic(config)# telnet max session 5 ssh max session ssh max session \[command] ssh max session count \[purpose] set the maximum number of ssh user sessions \[parameter] parameter description count the range of value is 1 100, default value is 10 \[view] system configuration view \[use cases] sonic(config)# telnet ssh session 5