246
Step Command
Remarks
global settings apply to the local
user.
6.
Configure the password
complexity checking policy
for the local user.
password-control complexity
{
same-character
|
user-name
}
check
By default, the settings equal
those for the user group to which
the local user belongs. If no
password complexity checking
policy is configured for the user
group, the global settings apply to
the local user.
7.
Configure the login attempt
limit.
password-control login-attempt
login-times
[
exceed
{
lock
|
lock-time
time
|
unlock
} ]
By default, the settings equal
those for the user group to which
the local user belongs. If no
login-attempt policy is configured
for the user group, the global
settings apply to the local user.
Setting super password control parameters
The super password allows you to obtain a temporary user role without reconnecting to the device.
For more information, see
Fundamentals Configuration Guide
.
To set super password control parameters:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set the password expiration
time for super passwords.
password-control super aging
aging-time
The default setting is 90 days.
3.
Configure the minimum
length for super
passwords.
password-control super length
length
•
In non-FIPS mode, the
default setting is 10
characters.
•
In FIPS mode, the default
setting is 15 characters.
4.
Configure the password
composition policy for super
passwords.
password-control super
composition type-number
type-number
[
type-length
type-length
]
The following default settings
apply:
•
In non-FIPS mode, a super
password must contain a
minimum of one character
type and a minimum of one
character for each type.
•
In FIPS mode, a super
password must contain a
minimum of four character
types and a minimum of one
character for each type.
Displaying and maintaining password control
Execute
display
commands in any view and
reset
commands in user view.
Содержание FlexFabric 5940 SERIES
Страница 251: ...238 ...
