Syntax
password-control complexity { same-character | user-name } check
undo password-control complexity { same-character | user-name } check
Default
Both username checking and repeated character checking are disabled.
Views
System view
Predefined user roles
network-admin
Parameters
same-character: Refuses a password that contains any character repeated consecutively three or more
times. For example, aaabc is a weak password.
user-name: Refuses a password that contains the username or the reverse of the username. For example,
if the username is 123, a password such as abc123 or 321df is weak.
Usage guidelines
You can enable both username checking and repeated character checking.
After the password complexity checking is enabled, weak passwords will be refused.
Examples
# Configure the password complexity checking policy, refusing any password that contains the username
or the reverse of the username.
<Sysname> system-view
[Sysname] password-control complexity user-name check
Related commands
display password-control
password-control composition
Use password-control composition to configure the password composition policy.
Use undo password-control composition to restore the default.
Syntax
password-control composition type-number type-number [ type-length type-length ]
undo password-control composition
Default
In non-FIPS mode, the global password composition policy is as follows: A password must contain at
least one type of characters from uppercase letters, lowercase letters, digits, or special characters (see
Security Configuration Guide), and each type must contain at least one character.
140
To Next Page
Loading...
Need help?
General
