Security
Password Strength
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x 298
16
 
Since passwords are used to authenticate users accessing the device, simple passwords are 
potential security hazards. Therefore, password complexity requirements are enforced by 
default and may be configured as necessary. 
To define password complexity rules:
STEP 1 Click Security > Password Strength.
STEP  2 Enter the following aging parameters for passwords:
• Password Aging—If selected, the user is prompted to change the password when the 
Password Aging Time expires. 
• Password Aging Time—Enter the number of days that can elapse before the user is 
prompted to change the password.
NOTE Password aging also applies to zero-length passwords (no password).
STEP  3 Select Password Complexity Settings to enable complexity rules for passwords.
If password complexity is enabled, new passwords must conform to the following default 
settings:
• Have a minimum length of eight characters.
• Contain characters from at least three character classes (uppercase letters, lowercase 
letters, numbers, and special characters available on a standard keyboard).
• Are different from the current password.
• Contain no character that is repeated more than three times consecutively.
• Do not repeat or reverse the users name or any variant reached by changing the case of 
the characters.
• Do not repeat or reverse the manufacturers name or any variant reached by changing the 
case of the characters.
STEP  4 If the Password Complexity Settings are enabled, the following parameters may be 
configured:
• Minimal Password Length—Enter the minimal number of characters required for 
passwords.
NOTE A zero-length password (no password) is allowed, and can still have password 
aging assigned to it.
• Allowed Character Repetition—Enter the number of times that a character can be 
repeated.