Cisco ASR 5500 User Manual

Management Card Replacement and License Keys
License keys are stored on a midplane EEPROM in the ASR 5500 chassis. The MIO/UMIO/MIO2s share
these license keys. There is no need to swap memory cards into replacement MIO/UMIO/MIO2s.
Managing Local-User Administrative Accounts
Unlike context-level administrative accounts which are configured via a configuration file, information for
local-user administrative accounts is maintained in a separate file in flash memory and managed through the
software's Shared Configuration Task (SCT). Because local-user accounts were designed to be compliant with
ANSI T1.276-2003, the system provides a number of mechanisms for managing these types of administrative
user accounts.
For additional information, see Disable AAA-based Authentication for Console, on page 64 and Limit
local-user Login on Console/vty Lines, on page 65.
Configuring Local-User Password Properties
Local-user account password properties are configured globally and apply to all local-user accounts. The
system supports the configuration of the following password properties:
•
Complexity: Password complexity can be forced to be compliant with ANSI T1.276-2003.
•
History length: How many previous password versions should be tracked by the system.
•
Maximum age: How long a user can use the same password.
•
Minimum number of characters to change: How many characters must be changed in the password
during a reset.
•
Minimum change interval: How often a user can change their password.
•
Minimum length: The minimum number of characters a valid password must contain.
Refer to the local-user password command in the Global Configuration Mode Commands chapter of the
Command Line Interface Reference for details on each of the above parameters.
Configuring Local-User Account Management Properties
Local-user account management includes configuring account lockouts and user suspensions.
Local-User Account Lockouts
Local-user accounts can be administratively locked for the following reasons:
•
Login failures: The configured maximum login failure threshold has been reached. Refer to the local-user
max-failed-logins command in the Global Configuration Mode Commands chapter of the Command
Line Interface Reference for details
ASR 5500 System Administration Guide, StarOS Release 21.4
139
Software Management Operations
Management Card Replacement and License Keys

Cisco ASR 5500 Specifications

General

Brand	Cisco
Model	ASR 5500
Category	Network Router
Language	English