Cisco PIX 525 Specifikace stáhnout pdf (Strana 445)

100

101

25-31

Cisco Security Appliance Command Line Configuration Guide

OL-6721-01

Chapter 25 Configuring Tunnel Groups, Group Policies, and Users

Configuring Users

Group-lock restricts users by checking whether the group configured in the VPN client is the same as

the tunnel group to which the user is assigned. If it is not, the security appliance prevents the user from

connecting. If you do not configure group-lock, the security appliance authenticates users without regard

to the assigned group.

hostname(config-username)# group-lock {value

tunnel-grp-name

| none}

hostname(config-username)# no group-lock

The following example shows how to set group lock for the user named “anyuser”:

hostname(config)# username anyuser attributes

hostname(config-username)# group-lock value

tunnel group name

Step 12 Specify whether to let users store their login passwords on the client system. Password storage is

disabled by default. Enable password storage only on systems that you know to be in secure sites. To

disable password storage, enter the password-storage command with the disable keyword. To remove

the password-storage attribute from the running configuration, enter the no form of this command. This

enables inheritance of a value for password-storage from the group policy.

hostname(config-username)# password-storage {enable | disable}

hostname(config-username)# no password-storage

This command has no bearing on interactive hardware client authentication or individual user

authentication for hardware clients.

The following example shows how to enable password storage for the user named “anyuser”:

hostname(config)# username anyuser attributes

hostname(config-username)# password-storage enable

1 2 ... 440 441 442 443 444 445 446 447 448 449 450 ... 603 604

Komentáře k této Příručce

Žádné komentáře

Cisco PIX 525 Specifikace Strana 445

Komentáře k této Příručce