Contents

1   Introduction

This document describes how to create an account policy applicable for the local Operation and Maintenance (O&M) user accounts.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has sufficient access rights to perform the task, for example, the user has System Security Administrator role.
• The user is familiar with the security policy of the organization.
• An Ericsson Command-Line Interface (ECLI) session in Exec mode is in progress.

2   Procedure

To create an account policy:

1. Navigate to the LocalAuthenticationMethod Managed Object (MO), for example:

   >dn ManagedElement=NODE06ST,SystemFunctions=1,SecM=1,UserManagement=1,LocalAuthenticationMethod=1

2. Enter Config mode:

   (LocalAuthenticationMethod=1)>configure

3. Create the AccountPolicy MO, for example:

   (config-LocalAuthenticationMethod=1)>AccountPolicy=1

4. Set AccountPolicy attributes according to operators account policy, in case the values differ from defaults, for example:

   (config-AccountPolicy=1)>dormantTimer=360

5. Commit the settings:

   (config-AccountPolicy=1)>commit

6. Verify the settings:

   (AccountPolicy=1)>show -v

   The following is an example output:

   AccountPolicy=1 accountPolicyId="1" dormantTimer=360 reservedByAccount=[] <empty> <read-only> userLabel=[] <empty>