ZyXEL Communications 3.1 User Manual

Chapter 26 User/Group

ZyWALL (ZLD) CLI Reference Guide

The following commands show the current settings for the number of simultaneous logins.

users default-setting [no] user-type <admin 

|ext-user|guest|limited-admin|user|ext-group-

user> logon-re-auth-time <0..1440>

Sets the default reauthorization time (in minutes) for each type of 
new user. Set it to zero for unlimited reauthorization time. The 

no

 

command sets the default reauthorization time to thirty.

show users retry-settings

Displays the current retry limit settings for users.

[no] users retry-limit

Enables the retry limit for users. The 

no

 command disables the 

retry limit.

[no] users retry-count <1..99>

Sets the number of failed login attempts a user can have before the 
account or IP address is locked out for lockout-period minutes. The 

no

 command sets the retry-count to five.

[no] users lockout-period <1..65535>

Sets the amount of time, in minutes, a user or IP address is locked 
out after retry-count number of failed login attempts. The 

no

 

command sets the lockout period to thirty minutes.

show users simultaneous-logon-settings

Displays the current settings for simultaneous logins by users.

[no] users simultaneous-logon {administration 

| access} enforce

Enables the limit on the number of simultaneous logins by users of 
the specified account-type. The 

no

 command disables the limit, or 

allows an unlimited number of simultaneous logins.

[no] users simultaneous-logon {administration 

| access} limit <1..1024>

Sets the limit for the number of simultaneous logins by users of the 
specified account-type. The 

no

 command sets the limit to one.

show users update-lease-settings

Displays whether or not access users can automatically renew their 
lease time.

[no] users update-lease automation

Lets users automatically renew their lease time. The 

no

 command 

prevents them from automatically renewing it.

show users idle-detection-settings

Displays whether or not users are automatically logged out, and, if 
so, how many minutes of idle time must pass before they are 
logged out.

[no] users idle-detection

Enables logging users out after a specified number of minutes of 
idle time. The 

no

 command disables logging them out.

[no] users idle-detection timeout <1..60>

Sets the number of minutes of idle time before users are 
automatically logged out. The 

no

 command sets the idle-detection 

timeout to three minutes.

username/groupname Commands Summary: Settings (continued)

Router# configure terminal

Router(config)# show users simultaneous-logon-settings

enable simultaneous logon limitation for administration account: yes

maximum simultaneous logon per administration account          : 1

enable simultaneous logon limitation for access account        : yes

maximum simultaneous logon per access account                  : 3