212
Setting local user password control parameters
1. Enter system view.
N/A
2. Create a device
management user and enter
local user view.
local-user
user-name
class
manage
By default, no local user exists.
Local user password control
applies to
users instead of network access
users.
F
or information about how to
configure a l
"Configuring AAA."
3. Configure the password
expiration time for the local
user.
password-control aging
aging-time
By default, the setting equals that
for the user group to which the
local user belongs. If no expiration
time is configured for the user
group, the global setting applies to
the local user.
4.
password length for the local
user.
password-control length
length
By default, the setting equals that
for the user group to which the
local user belongs. If no minimum
password length is configured for
the user group, the global setting
applies to the local user.
5. Configure the password
composition policy
local user.
password-control composition
type-number
type-number
[
type-length
type-length ]
By default, the settings equal
those for the user group to which
the local user belongs. I
f no
password composition policy is
configured for the user group, the
global settings apply to the local
user.
6.
complexity checking policy
for the local user.
password-
{
same-character
|
user-name
}
check
By default, the settings equal
those for the user group to which
the local user belongs. I
f no
password complexity checking
policy is configured for the user
group, the global settings apply to
the local user.
7. Specify the maximum
number of login attempts and
the action to be taken for the
local user when the user fails
to log in after the specified
number of attempts.
password-control login-attempt
login-times [
exceed
{
lock
|
lock-time
time |
unlock
} ]
By default, the settings equal
those for the user group to which
the local user belongs. I
login-attempt policy is configured
for the user group, the global
settings apply to the local user.
Setting super password control parameters
The super password allows you to obtain a temporary user role without reconnecting to the device.
For more information about passwords for user roles, see Fundamentals Configuration Guide.
To set super password control parameters: