username
username
username-string
{
[
privilege
privilege-level
]
{
password
password-string
|
create-password
password-string
|
nopassword
}
|
access-time
begin-time
to
end-time
|
enable
|
expires
days
}
no username
username-string
[
[
privilege
privilege-level
]
{
password
password-string
|
create-password
password-string
|
nopassword
}
|
access-time
begin-time
to
end-time
|
enable
|
expires
days
]
The user account is not created.
- privilege privilege-level
- Sets the user's privilege level. The default privilege level is 0. You can specify one of the following levels:
- create-password password-string
- Creates an encrypted password for the user. You can enter up to 48 characters.
- access-time begin-time to end-time
- Configures the access permission for a specified period of time of the day, that is, between the specified beginning access time and ending access time.
Global configuration mode
You must be logged in with Super User access (privilege level 0) to add or delete user accounts or configure or modify other access parameters.
By default, user account details can be deleted or modified without any authentication.
Unauthorized deletion or modification of the user account can be prevented using the
service local-user-protection command. If the user account security is enabled using the
service local-user-protection command, deletion of user accounts or changing the password or privilege level of
the user is permitted only upon successful validation of the existing user password.
If the
enable strict password enforcement command is enabled on the device, for the password string, you must enter a minimum
of eight characters containing the following combinations:
- At least two uppercase characters
- At least two lowercase characters
- At least two numeric characters
- At least two special characters
You can use the
show user command to display the user account details.
The
no form of the command removes the user or the other user parameters.
The following example configures the privilege level of Super User access (0) for a user.
device(config)# username user1 privilege 0 password *******
The following example configures an unencrypted password for a user.
device(config)# username user1 password xpassx
The following example configures an encrypted password for a user.
device(config)# username user1 create-password xpassx
The following example creates a user account without a password.
device(config)# username user1 nopassword
The following example configures the access time for a user.
device(config)# username user1 access-time 00:00:00 to 12:00:00
The following example enables a user account if it is disabled.
device(config)# username user1 enable
The following example sets the user password to expire in 30 days.
device(config)# username user expires 30
The following example prompts the user to confirm existing password before successful password modification.
device(config)# username user1 password xpassx device(config)# service local-user-protection device(config)# username user1 password ypasswordy User already exists. Do you want to modify: (enter 'y' or 'n'): y To modify or remove user, enter current password: ******
| Release version | Command history |
|---|---|
| 08.0.40 | This command was modified to prompt the user to enter a valid password before deleting a user account or modifying the password or privilege level of the user. |