Admin Guide
Table Of Contents
- Contents
- Chapter 1: Introduction
- Chapter 2: New in this document
- Chapter 3: Basic administration
- Chapter 4: System startup fundamentals
- Chapter 5: Boot parameter configuration using ACLI
- Chapter 6: Run-time process management using ACLI
- Chapter 7: Chassis operations
- Chassis operations fundamentals
- Chassis operations configuration using ACLI
- Enabling jumbo frames
- Configuring port lock
- Configuring SONMP
- Viewing the topology message status
- Associating a port to a VRF instance
- Configuring an IP address for the management port
- Configuring Ethernet ports with Autonegotiation
- Enabling channelization
- Configuring serial management port dropping
- Controlling slot power
- Enabling or disabling the USB port
- Chassis operations configuration using EDM
- Editing system information
- Editing chassis information
- Configuring system flags
- Configuring channelization
- Configuring basic port parameters
- Viewing the boot configuration
- Configuring boot flags
- Enabling Jumbo frames
- Configuring the date and time
- Associating a port to a VRF instance
- Configuring CP Limit
- Configuring an IP address for the management port
- Editing the management port parameters
- Configuring the management port IPv6 interface parameters
- Configuring management port IPv6 addresses
- Auto reactivating the port of the SLPP shutdown
- Editing serial port parameters
- Enabling port lock
- Locking a port
- Viewing power information
- Viewing power status on VSP 8400
- Viewing fan information
- Viewing topology status information
- Viewing the topology message status
- Configuring a forced message control pattern
- Chapter 8: Hardware status using EDM
- Chapter 9: Domain Name Service
- Chapter 10: Licensing
- Chapter 11: Network Time Protocol
- Chapter 12: Secure Shell
- Secure Shell fundamentals
- Secure Shell configuration using ACLI
- Downloading the software
- Enabling the SSHv2 server
- Changing the SSH server authentication mode
- Setting SSH configuration parameters
- Verifying and displaying SSH configuration information
- Connecting to a remote host using the SSH client
- Generating user key files
- Managing an SSL certificate
- Disabling SFTP without disabling SSH
- Enabling SSH rekey
- Configuring SSH rekey data-limit
- Configuring SSH rekey time-interval
- Displaying SSH rekey information
- Downgrading or upgrading from releases that support different key sizes
- Secure Shell configuration using Enterprise Device Manager
- Chapter 13: System access
- System access fundamentals
- System access configuration using ACLI
- Enabling ACLI access levels
- Changing passwords
- Configuring an access policy
- Specifying a name for an access policy
- Allowing a network access to the switch
- Configuring access policies by MAC address
- System access security enhancements
- Displaying the boot config flags status
- Enabling enhanced secure mode
- Creating accounts for different access levels
- Deleting accounts in enhanced secure mode
- Configuring a password for a specific user
- Returning the system to the factory defaults
- Configuring the password complexity rule
- Configuring the password length rule
- Configuring the change interval rule
- Configuring the reuse rule
- Configuring the maximum number of sessions
- Configuring the maximum age rule
- Configuring the pre- and post-notification rule
- System access configuration using EDM
- Chapter 14: ACLI show command reference
- Access, logon names, and passwords
- Basic switch configuration
- Current switch configuration
- CLI settings
- Ftp-access sessions
- Hardware information
- NTP server statistics
- Power summary
- Power information for power supplies
- System information
- System status (detailed)
- Telnet-access sessions
- Users logged on
- Port egress COS queue statistics
- CPU queue statistics
- Chapter 15: Port numbering and MAC address assignment reference
- Chapter 16: Supported standards, RFCs, and MIBs
- Glossary
Variable Value
user WORD<1–255> Specifies a particular user.
Configuring the pre- and post-notification rule
Use the following procedure to configure the pre-notification and post-notification rule.
After enhanced secure mode is enabled, the switch enforces password expiry. To ensure a user
does not lose access, the switch offers pre- and post-notification messages explaining when the
password will expire.
The administrator can define pre- and post-notification intervals to between one to 99 days.
Before you begin
• You must enable enhanced secure mode in either the JITC or non-JITC sub-modes. It is
recommended that you use the non-JITC sub-mode because the JITC sub-mode is more
restrictive and prevents the use of some troubleshooting utilities.
About this task
The pre-notification intervals provide messages to warn users that their passwords will expire within
a particular timeframe:
• interval 1—By default, interval 1 is 30 days.
• interval 2—By default, interval 2 is 7 days.
• interval 3—By default, interval 3 is 1 day.
The post-notification intervals provide notification to users that their passwords have expired within a
particular timeframe:
• interval 1—By default, interval 1 is 1 day.
• interval 2—By default, interval 2 is 7 days.
• interval 3—By default, interval 3 is 30 days.
Procedure
1. Enter Global Configuration mode:
enable
configure terminal
2. Configure the pre-notification rule option:
password pre-expiry-notification-interval <1–99> <1–99> <1–99>
3. Configure post-notification rule option:
password post-expiry-notification-interval <1–99> <1–99> <1–99>
4. Configure the pre-notification rule to the default:
default password pre-expiry-notification-interval
5. Configure the post-notification rule to the default:
default password post-expiry-notification-interval
System access configuration using ACLI
January 2017 Administering Avaya VSP 7200 Series and 8000 Series 209
Comments on this document? infodev@avaya.com