User Management

You can create a local database to maintain user information and manage users on the local switch.

Context

You need to create a local user account and configure attributes of the local user so that the switch can authenticate and authorize the local user that logs in according to the local user information.

By default, a local user named admin exists in the system. The user password is admin@huawei.com, and access type is HTTP.

NOTE:

Security risks exist if the user access type is set to Telnet or FTP. It is recommended that you set the uesr access type to SSH.

A simple password brings security risks. It is recommended that you change the password to a complicated one after logging in to the web network management system using the default account. A password should consist of at least 8 characters, and contain at least two types of the following: lowercase letters, uppercase letters, numerals, special characters (such as ! $ # %). The password cannot contain spaces and single quotation marks ('). In addition, the password cannot be the same as the user name or the mirror user name.

Procedure

Create a user.

Choose Security > AAA > User Management in the navigation tree to open the User page.

Click New to open the Create User page.

Table 1 describes the parameters on the Create User page.

**Table 1** Create User
Parameter	Description
User Name	Indicates a new user name. This parameter is mandatory.
Password	Indicates the password.
Confirm Password	Confirms the password. It must be the same as the password.
Use Level	Indicates the user level. The value ranges from 0 to 15. NOTE: Only users of level 3 or higher have the management rights. Users at levels 0, 1 and 2 have only visit-level rights. It is recommended that set the user level to 2 or higher. You can create a user account at the same or lower level.
FTP Directory	Indicates the FTP directory, for example, flash:/. NOTE: If the access type of a local user is set to FTP, this parameter is mandatory; otherwise, FTP users cannot log in.
User State	Indicates the user status, including: Active Block By default, the value is Active. NOTE: If a local user is in Active state, a switch accepts and processes the authentication request of the user. If a local user is in block state, the authentication request from this user is denied.
Access Type	Indicates the access type. After you specify the access type of a user, only the users using the specified access type can log in. The steps are as follows: Select the access type in the right list box and click . The selected access type is displayed in the right list box. By default, a user can log in by using any access type. NOTE: You can hold shift or ctrl to select multiple access types or click to select all the access types. If you do not specify any value, all options are selected by default. If you deselect all options, the default settings are restored (all access types are supported).

Set parameters.
Click OK.

Modify a user.
1. Choose Security > AAA > User Management in the navigation tree to open the User Management page.
2. Click to open the Modify User page.
  NOTE:
  - Table 1 describes the parameters on the Modify User page.
  - The user name cannot be modified.
3. Set parameters.
4. Click OK.
  NOTE:
  When changing the password, enter the old password in Confirm Old Password
Delete a user.
1. Choose Security > AAA > User Management in the navigation tree to open the User Management page.
2. Select a record that you want to delete and click Delete. The system asks you whether to delete the record.
  NOTE:
  - The current user cannot be deleted.
  - You can delete a user account at the same or lower level but not your own account.
  - To select a record, click the check box of the record.
  - To delete records in batches, click the check boxes of the records.
3. Click OK.