132
To do…
Use the command…
Remarks
5.
Configure the password
composition policy.
password-control composition
type-number
policy-type
[
type-
length
type-length
]
Optional.
By default, the minimum number
of password composition types is
1, and the minimum number of
characters of a password
composition type is also 1.
6.
Configure the password
complexity checking policy.
password-control complexity
{
same-character
|
user-name
}
check
Optional.
By default, the system does not
perform password complexity
checking.
7.
Set the maximum number of
history password records for
each user.
password-control history
max-
record-num
Optional.
4 by default.
8.
Specify the maximum number
of login attempts and the
action to be taken when a
user fails to log in after the
specified number of attempts.
password-control login-attempt
login-times
[
exceed
{
lock
|
unlock | lock-time
time
} ]
Optional.
By default, the maximum number
of login attempts is 3, and a user
failing to log in after the specified
number of attempts must wait for
1 minute before trying again.
9.
Set the number of days during
which the user is warned of
the pending password
expiration.
password-control alert-before-
expire
alert-time
Optional.
7 days by default.
10.
Set the maximum number of
days and maximum number
of times that a user can log in
after the password expires.
password-control expired-user-
login delay
delay
times
times
Optional.
By default, a user can log in three
times within 30 days after the
password expires.
11.
Set the authentication timeout
time.
password-control authentication-
timeout
authentication-timeout
Optional.
60 seconds by default.
12.
Set the maximum account idle
time.
password-control login idle-time
idle-time
Optional.
90 days by default.
The action to be taken after a user fails to log in for the specified number of attempts takes effect
immediately and can, therefore, affect the users already in the blacklist. Other password control
configurations take effect only for users logging in later and for passwords configured later.
Setting user group password control parameters
To do…
Use the command…
Remarks
1.
Enter system view.
system-view
—
2.
Create a user group and
enter user group view.
user-group
group-name
—
3.
Configure the password
aging time for the user group.
password-control aging
aging-
time
Optional.
By default, the password aging
time configured in system view is
used.
