Alcatel-Lucent OmniSwitch 6850 Series, Руководство по управлению

Страница: 185 / 292

Managing Switch User Accounts Configuring Password Policy Settings
OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 page 7-13
Configuring Password Character Requirements
The character requirements specified in the global password policy determine the minimum number of
uppercase, lowercase, non-alphanumeric, and 10-base digit characters required in all passwords. These
requirements are configured using the following
user password-policy commands:
Specifying zero with any of the these commands disables the requirement. For example, if the number of
minimum uppercase characters is set to zero (the default), then there is no requirement for a password to
contain any uppercase characters.
Configuring Password Expiration
By default, password expiration is disabled on the switch. A global default password expiration may be
specified for all users or password expiration may be set for an individual user.
Note. When the current user’s password has less than one week before expiration, the switch will display
an expiration warning after login.
If a user’s password expires, the user will be unable to log into the switch through any interface; the
admin user must reset the user’s password. If the admin user’s password expires, the admin user will
have access to the switch through the console port with the currently configured password.
Default Password Expiration
To set password expiration globally, use the user password-expiration command with the desired
number of days; the allowable range is 1 to 150 days. For example:
-> user password-expiration 3
The default password expiration is now set to three days. All user passwords on the switch will be set or
reset with the three-day expiration. If an individual user was configured with a different expiration through
the
user command, the expiration will be reset to the global value.
The expiration is based on the switch system date/time and date/time the user password-expiration
command is entered. For example, if a user is configured with a password expiration of 10 days, but the
global setting is 20 days, that user’s password will expire in 10 days.
To disable the default password expiration, use the user password-expiration command with the disable
option:
-> user password-expiration disable
Command Configures ...
user password-policy min-uppercase The minimum number of uppercase characters
required in all passwords.
user password-policy min-lowercase The minimum number of lowercase characters
required in all passwords.
user password-policy min-digit The minimum number of base-10 digits required
in all passwords.
user password-policy min-nonalpha The minimum number of non-alphanumeric char-
acters (symbols) required in all passwords.