211
8. Specify the maximum
number of login attempts and
the action to be taken when a
user fails to log in
after the
specified number of
attempts.
password-control login-attempt
login-times [
exceed
{
lock
|
lock-time
time |
unlock
} ]
By default, the maximum number
of login attempts is 3 and a user
failing to log in after the specified
number of attempts must wait for
1 minute before trying again.
9. Set the number of days
during which a
notifi
password expiration.
password-control
alert-before-expire
alert-time
The default setting is 7 days.
10. Set the maximum number of
days and maximum number
of times that a user can log in
after the password expires.
password-control
expired-user-login delay
delay
times
times
By default, a user can log in three
times within 30 days after the
password expires.
11. Set the maximum account
idle time.
password-
idle-time
idle-time
The default setting is 90 days.
Setting user group password control parameters
1. Enter system view.
N/A
2.
enter user group view.
user-group
group-name
By default, no user group exists.
F
or information about how to
configure
"Configuring AAA."
3. Configure the password
expiration time for the user
group.
password-control aging
aging-time
expiration time of the user group
equals the global password
expiration time.
4.
password length for the user
group.
password-control length
length
password length of the user group
equals the global minimum
password length.
5. Configure the password
composition policy
user group.
password-control composition
type-number
type-number
[
type-length
type-length ]
composition policy
group equals the global password
composition policy.
6.
complexity checking policy
for the user group.
password-
{
same-character
|
user-name
}
check
complexity checking policy of the
user group equals the global
password complexity checking
policy.
7. Specify the maximum
number of login attempts and
the action to be taken when a
user in the user group fails to
log in
number of attempts.
password-control login-attempt
login-times [
exceed
{
lock
|
lock-time
time |
unlock
} ]
By default, the login-attempt
policy of the user group equals the
global login-attempt policy.