Security
Password Strength
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
298
16
Since passwords are used to authenticate users accessing the device, simple passwords are
potential security hazards. Therefore, password complexity requirements are enforced by
default and may be configured as necessary.
To define password complexity rules:
STEP 1
Click
Security
>
Password Strength
.
STEP 2
Enter the following aging parameters for passwords:
•
Password Aging
—If selected, the user is prompted to change the password when the
Password Aging Time
expires.
•
Password Aging Time
—Enter the number of days that can elapse before the user is
prompted to change the password.
NOTE
Password aging also applies to zero-length passwords (no password).
STEP 3
Select
Password Complexity Settings
to enable complexity rules for passwords.
If password complexity is enabled, new passwords must conform to the following default
settings:
•
Have a minimum length of eight characters.
•
Contain characters from at least three character classes (uppercase letters, lowercase
letters, numbers, and special characters available on a standard keyboard).
•
Are different from the current password.
•
Contain no character that is repeated more than three times consecutively.
•
Do not repeat or reverse the users name or any variant reached by changing the case of
the characters.
•
Do not repeat or reverse the manufacturers name or any variant reached by changing the
case of the characters.
STEP 4
If the
Password Complexity Settings
are enabled, the following parameters may be
configured:
•
Minimal Password Length
—Enter the minimal number of characters required for
passwords.
NOTE
A zero-length password (no password) is allowed, and can still have password
aging assigned to it.
•
Allowed Character Repetition
—Enter the number of times that a character can be
repeated.
