AAA Commands
83
DELL CONFIDENTIAL – PRELIMINARY 9/13/06 – FOR PROOF ONLY
Example
The following example configures a minimum length of 8 characters required for passwords in
the local database.
p
asswo
r
ds aging
The
passwords aging
Global Configuration mode command sets the expiration time of
username and enable passwords. To remove the password expiration time, use the
no
form of
this command.
Syntax
passwords aging username
name days
no passwords aging username
name
passwords aging enable-password
level days
no passwords aging enable-password
level
•
days—
The number of days before a password expires. (Range: 1-365)
•
name
— The name of the user (Range: 1- 20 characters).
•
level
— The level to which the password applies (Range: 1-15).
Default Configuration
No password expiration time.
Command Mode
Global Configuration mode
User Guidelines
•
Relevant to local user passwords, line passwords, and enable passwords.
•
The password expiration date is calculated from the day the password is defined, and not from
the day aging time is defined.
•
Ten days before the password expiration date, the user receives a syslog warning to change the
password within "n" days. These warnings continue until the password expiration date.
•
After the password expiration date, the user receives three chances to log in and change the
password. If the user still does not change the password, the account is locked.
•
It is recommended that local device time be updated using an external SNTP clock.
Console(config)#
passwords min-length
8
