170
Setting super password control parameters
NOTE:
CLI commands fall into four levels: visit, monitor, system, and manage, in ascending order. Accordingly, login
users fall into four levels, each corresponding to a command level. A user of a certain level can only use the
commands at that level or lower levels.
To switch from a lower user level to a higher one, a user needs to enter a password for authentication. This
password is called a “super password”. For details on super passwords, see the
Fundamentals Configuration
Guide
.
Follow these steps to set super password control parameters:
To do…
Use the command…
Remarks
Enter system view
system-view
—
Set the password aging time for
super passwords
password-control super aging
aging-time
Optional
90 days by default
Configure the minimum length for
super passwords
password-control super length
length
Optional
10 characters by default
Configure the password
composition policy for super
passwords
password-control super
composition type-number
type-
number
[
type-length
type-length
]
Optional
By default, the minimum number
of password composition types is
1 and the minimum number of
characters of a password
composition type is 1 too.
Setting a local user password in interactive mode
You can set a password for a local user in interactive mode. When doing so, you need to confirm the
password.
Follow these steps to set a password for a local user in interactive mode:
To do...
Use the command…
Remarks
Enter system view
system-view
—
Create a local user and enter
local user view
local-user
user-name
—
Set the password for the local
user in interactive mode
password
Required
Displaying and maintaining password control
To do…
Use the command…
Remarks
Display password control
configuration information
display password-control
[
super
]
[
|
{
begin
|
exclude
|
include
}
regular-expression
]
Available in any view
