User Management

You can create a local database to maintain user information and manage users on the local switch.

Context

You need to create a local user account and configure attributes of the local user so that the switch can authenticate and authorize the local user that logs in according to the local user information.

By default, a local user named admin exists in the system. The user password is admin@huawei.com, and access type is HTTP.

NOTE:

A simple password brings security risks. It is recommended that you change the password to a complicated one after logging in to the web network management system using the default account. A password should consist of at least 8 characters, and contain at least two types of the following: lowercase letters, uppercase letters, numerals, special characters (such as ! $ # %). The password cannot contain spaces and single quotation marks ('). In addition, the password cannot be the same as the user name or the mirror user name.

Security risks exist if the user access type is set to Telnet, FTP or HTTP. You are advised to configure the required access modes only.

If the password configured in local user creation or modification is the same as the default password, security risk exists.

Procedure

Create a user.

Choose Security > AAA > User Management in the navigation tree to open the User Management page.

Click Create to open the Create User page.

Table 1 describes the parameters on the Create User page.

**Table 1** Create User/Modify User
Parameter	Description
User name	Indicates a new user name. This parameter is mandatory.
Encryption type	Indicates the password encryption type. NOTE: When you modify user information, you can change the password encryption type from reversible to irreversible, but cannot from irreversible to reversible.
Password	Indicates the password.
Confirm password	Confirms the password. It must be the same as the password.
User level	Indicates the user level. The value ranges from 0 to 15. NOTE: Only users of level 3 or higher have the management rights. You can create a user account at the same or lower level.
FTP directory	Indicates the FTP directory, for example, flash:/. NOTE: If the access type of a local user is set to FTP, this parameter is mandatory; otherwise, FTP users cannot log in.
User state	Indicates the user status, including: Active Block By default, the value is Active. NOTE: If a local user is in Active state, a switch accepts and processes the authentication request of the user. If a local user is in Block state, the authentication request from this user is denied.
Access type	Indicates the access type. After you specify the access type of a user, only the users using the specified access type can log in. This parameter is mandatory. The steps are as follows: Select the access type in the right list box and click . The selected access type is displayed in the right list box. NOTE: You can hold shift or ctrl to select multiple access types or click to select all the access types. Access types are associated with password encryption types: Irreversible: FTP, HTTP, SSH, Telnet, Terminal, and x25-pad Reversible: 8021X, Bind, PPP, and Web
Forced logout	Indicates whether a user is forcibly disconnected from the network. NOTE: This parameter is only displayed on the user modification page.

Set parameters.
Click OK.

Modify a user.
1. Choose Security > AAA > User Management in the navigation tree to open the User Management page.
2. Click to open the Modify User page.
  NOTE:
  - Table 1 describes the parameters on the Modify User page.
  - The user name cannot be modified.
3. Set parameters.
4. Click OK.
  NOTE:
  When changing your password, enter the old password in Confirm Old Password
Delete a user.
1. Choose Security > AAA > User Management in the navigation tree to open the User Management page.
2. Select a record that you want to delete and click Delete. The system asks you whether to delete the record.
  NOTE:
  - The current user cannot be deleted.
  - You can delete a user account at the same or lower level but not your own account.
  - To select a record, click the check box of the record.
  - To delete records in batches, click the check boxes of the records.
3. Click OK.