User's Manual

Fortress ES-Series CLI Guide: Mesh Point CLI and Administrative Access
20
Audit: required
2.2.3.1 Adding Administrator Accounts
Add new accounts to the local administrator database with
add
admin
:
# add admin
Username (User name): <adminName>
State[enable] ([enable|disable] User state): enable|disable
Full Name[""] (Account full name): " <full name> "
Description[""] (Account description): "
<description of account> "
Role[Maintenance] ([logviewer|maintenance|administrator]): administrator|maintenance|logviewer
Password Locked[N] ([y|n] Prevent user from changing password):
NOTE: You can
exit the interac-
tive add admin com-
mand without making
changes with Ctrl-C.
PasswordForceChange[N] ([y|n] force user to change password):
Password (Password for this user): <adminPassword>
Password Confirm (Password for this user): <adminPassword>
GUI[enable] ([y|n] Allow user GUI access):
Console[enable] ([y|n] Allow user console access):
SSH[enable] ([y|n] Allow user CLI access):
Audit[required] ([required| prohibited | automatic ] Audit setting):
[OK]
NOTE : Administra-
tor
Usernames are
case-sensitive and can
include spaces and any
of the symbols in the
set:
~!@#$%^&*()_-
+={}[]|\:;<>
,.?/
(excludes double
and single quotation
marks).
You must create a unique Username of 1 to 32 characters for
the account and configure the
State, Role and Password. A
disabled account will persist in the database, but cannot be
used to log on to the Mesh Point. Account roles are described
at the beginning of this section (Section 2.2). Password
requirements for local administrative accounts are global and
configurable (refer to Section 2.2.1).
The
Full Name and Description fields are optional, and the
double quotation marks are required only when fields contain
spaces or special characters (as enumerated in the
NOTE to
the right).
You can enter new values for the remaining fields—or leave a
field blank and the setting unchanged by striking
Enter↵, to
display the next field. These determine whether the account
password is locked and cannot be changed (
Password Locked:
Y
) or must be changed the first time the account is used
(
PasswordForceChange: Y ). Both options are disabled by
default, and if you enable
PasswordForceChange , it will reset to N
(disabled) after the account holder has successfully changed
the password during initial logon.
By default, administrative accounts are created with permission
to access the management interface by any means: network
access to the Mesh Point GUI (
gui) or CLI (cli) and terminal
access to the Mesh Point CLI through the front-panel
Console
port (
console). You can selectively disable access to any
interface for a given account.
Finally, remote audit logging of activity on the account can be
configured. By default, audit logging is
required, which
includes all activity on the account in the audit log. A setting of
prohibited excludes all account activity from the audit log. An