Black Box ET0010A, Руководство пользователя CLI, Страница: 26 / 212

Assigning Passwords
ETEP CLI User Guide 27
Assigning Passwords to Users
Default user names and passwords are shown in Table 9 . It is strongly recommended that the
Administrator change the default passwords before putting the ETEP into operation in the network.
The ETEP enforces two sets of password controls: default and strong. The password conventions for each
password policy are listed below.
Default Password Conventions
●
Passwords must be a minimum of 8 characters.
●
Passwords are case-sensitive.
●
Standard alphanumeric characters are allowed, as are printable keyboard characters and symbols. If
you plan to use EncrypTight to manage the ETEPs, do not use the following characters:
< > & “ $ ‘ ( ) | ; ? / \
●
Passwords must contain at least 2 characters from a mix of upper case letters, lower case letters,
numbers and non-alphanumeric symbols. For example, an acceptable password might contain an
upper case letter and a number, or a lower case letter and a symbol, or an upper case letter and a
lower case letter.
●
Dictionary words are not allowed.
●
Do not use non-printable ASCII characters.
●
The ETEP allows an unlimited number of failed login attempts without locking the user out of the
appliance.
Strong Password Conventions
●
Passwords must be at least 15 characters long.
●
Standard alphanumeric characters are allowed, as are printable keyboard characters and symbols. If
you plan to use EncrypTight to manage the ETEPs, do not use the following characters:
< > & “ $ ‘ ( ) | ; ? / \
●
Passwords must contain a mix of upper case letters, lower case letters, numbers and special
characters, including at least two of each of the four types of characters.
●
Dictionary words are not allowed.
●
When a password is changed, the new password must differ from the previous password by at least
four characters.
●
The password must not contain, repeat, or reverse the associated user ID.
●
The password must not contain three of the same characters used consecutively.
●
A user's password must not be identical to any other user's password.
●
A new password must be different from the previous 10 passwords used
●
When strong password enforcement is enabled, the ETEP allows three consecutive failed login
attempts in a 15 minute period prior to locking an account. After the third failure the account is
locked for 15 minutes.
Table 9 Default user names and passwords on the ETEPs
Role Default user name Default password
Administrator admin admin
Ops ops ops