440
Setting a local user password in interactive mode
You can set a password for a local user in interactive mode. When doing so, you need to confirm the
password.
To set a password for a local user in interactive mode:
Step Command
1. Enter system view.
system-view
2. Create a local user and enter local user view.
local-user
user-name
3. Set the password for the local user in interactive mode.
password
Displaying and maintaining password control
Task Command Remarks
Display password control
configuration.
display password-control
[
super
] [
|
{
begin
|
exclude
|
include
} regular-expression ]
Available in any view.
Display information about users in
the password control blacklist.
display password-control
blacklist
[
user-name
name
|
ip
ipv4-address |
ipv6
ipv6-address ]
[
|
{
begin
|
exclude
|
include
}
regular-expression ]
Available in any view.
Delete users from the password
control blacklist.
reset password-control
blacklist
[
user-name
name ]
Available in user view.
Clear history password records.
reset password-control
history-record
[
user-name
name |
super
[
level
level ] ]
Available in user view.
This command can delete the
history password records of one
or all users even when the
password history function is
disabled.
Password control configuration example
Network requirements
Configure a global password control policy to meet the following requirements:
• An FTP or VTY user failing to provide the correct password in two successive login attempts is
permanently prohibited from logging in.
• A user can log in five times within 60 days after the password expires.
• A password expires after 30 days.
• The minimum password update interval is 36 hours.
• The maximum account idle time is 30 days.
• A password cannot contain the username or the reverse of the username.
• No character appears consecutively three or more times in a password.
Configure a super password control policy to meet the following requirements: A super password
must contain at least three character types and at least five characters for each type.