跳转到内容
Ask AI

Local_user

此内容尚不支持你的语言。

This chapter provides examples on how to use Netconf to manage local_user configurations on AsterNOS devices.

Request example to create a local user via edit-config.

<config>
<top>
<users operation="create">
<user>
<name>test11</name>
<password>123456</password>
</user>
<user>
<name>test12</name>
<password>123456</password>
</user>
<user>
<name>test13</name>
<password>123456</password>
</user>
</users>
</top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:f78def8c-1164-4ec8-9af5-c204eecd7420">
<ok/>
</rpc-reply>

Request example to remove a local user via edit-config.

<config>
<top>
<users>
<user operation="delete">
<name>test1</name>
</user>
</users>
</top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:a4170319-d410-44bc-86da-7461fc38c790">
<ok/>
</rpc-reply>

Request example to change password of local user via edit-config.

<config>
<top>
<users>
<user operation="merge">
<name>test11</name>
<password>987654</password>
</user>
</users>
</top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:a02b9a72-4c2c-450f-8849-00d04c8440df">
<ok/>
</rpc-reply>

Request example to get all local user via get-config.

<filter type="subtree">
<top>
<users>
</users>
</top>
</filter>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:dfd92f28-43c4-4178-adae-f6461d9aaa68">
<data>
<top>
<users xmlns="http://asterfusion.com/ns/yang/asternos-local-user">
<user>
<name>Global</name>
</user>
<user>
<name>admin</name>
</user>
<user>
<name>test11</name>
<password>$y$j9T$RoRTOMc5ILBS..8afYlOz.$phBKTPM9lwE0JpoccJGlzNIhv.Ag0M9DMy18O6UvAo4</password>
</user>
<user>
<name>test12</name>
<password>$y$j9T$IkRcRqxvLWm/ThASNWRQj.$N/KXpb9kGk9BTE90VPDhZq4Mcl8tzaa800U76OnVA/8</password>
</user>
<user>
<name>test13</name>
<password>$y$j9T$rhOgqibIzPSJfExSZ7CAn0$cwsWCmZZrrAHbRNx8TcL10TE2e4Cxlu3trI0Zsj03e6</password>
</user>
</users>
</top>
</data>
</rpc-reply>

Request example to get local user policy via get-config.

<filter type="subtree">
<top>
<local-user-policy>
</local-user-policy>
</top>
</filter>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:e3d1c2c1-233a-4b93-ad86-10bd9a4e29ca">
<data>
<top>
<local-user-policy xmlns="http://asterfusion.com/ns/yang/asternos-local-user">
<retry-count>5</retry-count>
<block-time>5</block-time>
</local-user-policy>
</top>
</data>
</rpc-reply>

Request example to update local user policy via edit-config.

<config>
<top>
<local-user-policy operation="merge">
<block-time>6</block-time>
<retry-count>3</retry-count>
</local-user-policy>
</top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:f802f146-d847-4a30-970c-d79a10f7b0aa">
<ok/>
</rpc-reply>

Request example to delete local user policy via edit-config.

<config>
<top>
<local-user-policy operation="delete">
</local-user-policy>
</top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:b0d79773-a804-4f65-8477-aed47a51167a">
<ok/>
</rpc-reply>

Request example to get local user policy via get-config.

<filter type="subtree">
<top>
<local-password-policy>
</local-password-policy>
</top>
</filter>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:7fb20a34-ed8c-45c9-a88d-7d13621220d0">
<data>
<top>
<local-password-policy xmlns="http://asterfusion.com/ns/yang/asternos-local-user">
<enabled>false</enabled>
</local-password-policy>
</top>
</data>
</rpc-reply>

Request example to update local user policy via edit-config.

<config>
<top>
<local-password-policy operation="merge">
<enabled>true</enabled>
<min-len>9</min-len>
<min-lowercase>1</min-lowercase>
<min-uppercase>1</min-uppercase>
<min-digits>1</min-digits>
<min-special-chars>1</min-special-chars>
</local-password-policy>
</top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:2c283000-462d-4388-8de9-0cc990bd3b88">
<ok/>
</rpc-reply>

Request example to show local user block configurations via rpc show-users-block-conf.

<show-users-block-conf/>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:17d082ab-c5d8-48a8-a1e9-afd363d743c7">
<data>
<local-user-policy>
<retry-count>3</retry-count>
<block-time>6</block-time>
</local-user-policy>
</data>
</rpc-reply>

Request example to show users blocked via rpc show-users-blocked.

<show-users-blocked/>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:4c1dce48-7990-48e9-ae30-52ad9fa0d551">
<data xmlns="http://asterfusion.com/ns/yang/asternos-local-user">
+---------+------------+---------------------+---------------+
| Login | Failures | Latest failure | From |
+=========+============+=====================+===============+
| test11 | 3 | 2025-09-26 09:14:04 | 192.168.17.96 |
+---------+------------+---------------------+---------------+
</data>
</rpc-reply>

Request example to show users brief via rpc show-users-brief.

<show-users-brief/>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:3f188774-21a8-4ae2-b668-9acb0db396e8">
<data xmlns="http://asterfusion.com/ns/yang/asternos-local-user">
+--------+----------+-----------+---------------+--------------+
| USER | ONLINE | BLOCKED | LOGIN IP | LOGIN TIME |
+========+==========+===========+===============+==============+
| admin | yes | no | 192.168.17.54 | Sep 28 03:53 |
+--------+----------+-----------+---------------+--------------+
</data>
</rpc-reply>

Shows Information Of Local Users Password Control

Section titled “Shows Information Of Local Users Password Control”

Request example to show local users password control via rpc show-users-password-control.

<show-users-password-control/>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:6d8b52cd-2859-481f-bee8-c4a476cd5f2c">
<data>
<local-password-policy>
<state>enabled</state>
<min-len>9</min-len>
<min-lowercase>1</min-lowercase>
<min-uppercase>1</min-uppercase>
<min-digits>1</min-digits>
<min-special-chars>1</min-special-chars>
</local-password-policy>
</data>
</rpc-reply>