438
Step Command Remarks
9. Set the number of days
during which the user is
warned of the pending
password expiration.
password-control
alert-before-expire
alert-time
Optional.
The default setting is 7 days.
10. Set the maximum number of
days and maximum number
of times that a user can log
in after the password
expires.
password-control
expired-user-login delay
delay
times
times
Optional.
By default, a user can log in 3
times within 30 days after the
password expires.
11. Set the authentication
timeout time.
password-control
authentication-timeout
authentication-timeout
Optional.
The default setting is 60 seconds.
12. Set the maximum account
idle time.
password-control login
idle-time
idle-time
Optional.
The default setting is 90 days.
Setting user group password control parameters
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a user group and
enter user group view.
user-group
group-name
N/A
3. Configure the password
aging time for the user
group.
password-control aging
aging-time
Optional.
By default, the aging time of the
user group is the same as the
global password aging time.
4. Configure the minimum
password length for the user
group.
password-control length
length
Optional.
By default, the minimum
password length of the user group
is the same as the global
minimum password length.
5. Configure the password
composition policy for the
user group.
password-control composition
type-number
type-number
[
type-length
type-length ]
Optional.
By default, the password
composition policy of the user
group is the same as the global
password composition policy.
Setting local user password control parameters
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Create a local user and enter
local user view.
local-user
user-name
N/A