local-user access-limit

Function

The local-user access-limit command sets the maximum number of connections that a local user can establish. After the upper limit is reached, subsequent connections that the user established will be rejected.

The undo local-user access-limit command deletes the maximum number of connections that a user can establish.

By default, no maximum number of connections that a local user can establish is set.

Format

local-user user-name access-limit max-number

undo local-user user-name access-limit

Parameters

Parameter Description Value
user-name

Specifies the name of a user.

The value is a string of 1 to 253 case-insensitive characters without spaces. If the value includes @, the characters before @ are the user name and the characters after @ are the domain name. If the value excludes @ or the domain name does not exist, the entire string is the user name and the user belongs to the default domain. A user name cannot contain two or more @s.

max-number

Specifies the maximum number of connections that a local user can establish.

The value is an integer ranging from 1 to 262144.

Views

AAA view

Default Level

3: Management level

Task Name and Operations

Task Name Operations
aaa write

Usage Guidelines

Usage Scenario

To facilitate the user access management, run the local-user access-limit command to set the maximum number of connections that a local user can establish. After the maximum number of connections that a local user can establish is reached, the login attempts of additional users that use the user name will be denied.

Prerequisites

The user name must have been created using the local-user password command before the local-user access-limit command is run.

Configuration Impact

f the maximum number of connections is set for a nonexistent local user, the system informs that the user name does not exist.A local user attribute change does not apply to online users. The change takes effect after the online users relog in.

Example

# Enable the local user named user1 to establish a maximum of 10 connections in the aaa view.
<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] local-user user13579 password irreversible-cipher Hello-13579
[~HUAWEI-aaa] local-user user13579 access-limit 10
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >