HP 5120 SI Series

199
To do… Use the command… Remarks
Enable the password control
feature
password-control enable
Required
Disabled by default
Enable a password control
function individually
password-control { aging |
composition | history | length }
enable
Optional
All of the four password control
functions are enabled by default.
NOTE:
• After global password control is enabled, local user passwords configured on the device are not
displayed when you use the corresponding display command.
• For security purposes, the system prompts for Telnet, SSH, and terminal users to chan
g
e their passwords
the first time they lo
g
in to the device after the
g
lobal password control is enabled. Because FTP users can
only have their passwords changed by the administrator, if the administrator does not change
passwords for the FTP users after the
g
lobal password control is enabled, the FTP users cannot lo
g
in to
the device.
Setting global password control parameters
Follow these steps to set global password control parameters:
To do… Use the command…
Remarks
Enter system view system-view —
Set the password aging time password-control aging aging-time
Optional
90 days by default
Set the minimum password update
interval
password-control password
update interval interval
Optional
24 hours by default
Set the minimum password length password-control length length
Optional
10 characters by default
Configure the password
composition policy
password-control composition
type-number type-number
[ type-length type-length ]
Optional
In non-FIPS mode, by default, a
password must contain at least one
type of characters and each type
must contain at least one
character.
In FIPS mode, by default, a
password must contain four types
of characters and each type must
contain at least one character.
Configure the password
complexity checking policy
password-control complexity
{ same-character | user-name }
check
Optional
By default, the system does not
perform password complexity
checking.
Set the maximum number of history
password records for each user
password-control history
max-record-num
Optional
4 by default