21
Step Command
Remarks
8.
(Optional.) Configure
password control attributes
for the local user.
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password
length:
password-control length
length
•
Configure the password
composition policy:
password-control composition
type-number
type-number
[
type-length
type-length
]
Optional.
By default, the local user uses
password control attributes of the
user group to which the local user
belongs.
Only device management users
support the password control
function.
9.
(Optional.) Assign the
local user to a user group.
group
group-name
By default, a local user belongs to the
default user group
system
.
Configuring user group attributes
User groups simplify local user configuration and management. A user group comprises a group of local
users and has a set of local user attributes. You can configure local user attributes for a user group to
implement centralized user attributes management for the local users in the group. Local user attributes
that are manageable include authorization attributes.
By default, every newly added local user belongs to the default user group
system
and bears all attributes
of the group. To assign a local user to a different user group, use the
user-group
command in local user
view.
To configure user group attributes:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Create a user group and
enter its view.
user-group
group-name
By default, there is a
system-defined user group named
system
, which is the default user
group.
3.
Configure authorization
attributes for the user group.
authorization-attribute
{
acl
acl-number
|
idle-cut
minute
|
vlan
vlan-id
|
work-directory
directory-name
} *
By default, no authorization
attribute is configured for a user
group.
4.
(Optional.) Configure
password control attributes
for the user group.
•
Set the password aging time:
password-control aging
aging-time
•
Set the minimum password length:
password-control length
length
•
Configure the password
composition policy:
password-control composition
type-number
type-number
[
type-length
type-length
]
Optional.
By default, the user group uses
global settings, including a
90-day password aging time, a
minimum password length of 10
characters, and at least one
password composition type and
at least one character required
for each password composition
type. For more information about
password control commands, see
Security Command Reference
.