170
Setting super password control parameters
NOTE:
CLI commands fall into four levels: visit, monitor, system, and manage, in ascending order. Accordingly, login
users fall into four levels, each corresponding to a command level. A user of a certain level can only use the
commands at that level or lower levels.
To switch from a lower user level to a higher one, a user needs to enter a password for authentication. This
password is called a “super password”. For details on super passwords, see the
Fundamentals Configuration
Guide
.
Follow these steps to set super password control parameters:
Set the password aging time for
super passwords
password-control super aging
aging-time
Optional
90 days by default
Configure the minimum length for
super passwords
password-control super length
length
Optional
10 characters by default
Configure the password
composition policy for super
passwords
password-control super
composition type-number type-
number [ type-length type-length ]
Optional
By default, the minimum number
of password composition types is
1 and the minimum number of
characters of a password
composition type is 1 too.
Setting a local user password in interactive mode
You can set a password for a local user in interactive mode. When doing so, you need to confirm the
password.
Follow these steps to set a password for a local user in interactive mode:
Create a local user and enter
local user view
Set the password for the local
user in interactive mode
Displaying and maintaining password control
Display password control
configuration information
display password-control [ super ]
[ | { begin | exclude | include }
regular-expression ]