Configuring System Information 171• Expiry Date — Indicates the expiration date of the enable password.• Lockout Status — Specifies the number of failed authentication attempts since the user last logged insuccessfully, when the Enable Login Attempts checkbox is selected in the Password Managementpage. Specifies LOCKOUT, when the user account is locked.• Reactivate Suspended User — Reactivates the specified user’s access rights, when selected.Access rights can be suspended after unsuccessfully attempting to login.Defining a New Enable Password:1 Open the Enable Password page.2 Define the fields.3 Click Apply Changes.The new Enable password is defined and the device is updated.Assigning Enable Passwords Using CLI CommandsThe following table summarizes the equivalent CLI commands for setting fields displayed in the EnablePassword page.The following is an example of the CLI commands:Defining TACACS+ SettingsThe devices provide Terminal Access Controller Access Control System (TACACS+) client support.TACACS+ provides centralized security for validation of users accessing the device.TACACS+ provides a centralized user management system, while still retaining consistency withRADIUS and other authentication processes. TACACS+ provides the following services:• Authentication — Provides authentication during login and via user names and user-definedpasswords.• Authorization — Performed at login. Once the authentication session is completed, an authorizationsession starts using the authenticated user name. The TACACS server checks the user privileges.The TACACS+ protocol ensures network integrity through encrypted protocol exchanges between thedevice and TACACS+ server. To open the TACACS+ Settings page, click System→ ManagementSecurity→ TACACS+ in the tree view.Table 6-36. Modify Enable Password CLI CommandsCLI Command Descriptionenable password [level level]password [encrypted]Sets a local password to control access to user andprivilege levels.console(config)# enable password level 15 secret
