R3303-HP HSR6800 Routers Security Command Reference

204
Password complexity: Disabled (username checking)
Disabled (repeated characters checking)
# Display the password control configuration for super passwords.
<Sysname> display password-control super
Super password control configurations:
Password aging: Enabled (90 days)
Password length: Enabled (10 characters)
Password composition: Enabled (1 types, 1 characters per type)
Table 24 Command output
Field Descri
p
tion
Password control Whether the password control feature is enabled.
Password aging Whether password aging is enabled and, if enabled, the aging time.
Password length
Whether the minimum password length restriction function is enabled
and, if enabled, the setting.
Password composition
Whether the password composition restriction function is enabled and,
if enabled, the settings.
Password history
Whether the password history function is enabled and, if enabled, the
setting.
Early notice on password expiration
Number of days during which the user is warned of the pending
password expiration.
User authentication timeout Password authentication timeout time.
Maximum failed login attempts
Allowed maximum number of consecutive failed login attempts for FTP
and VTY users.
Login attempt-failed action
Action to be taken after a user fails to login for the specified number of
attempts.
Minimum password update time Minimum password update interval.
User account idle-time Maximum account idle time.
Login with aged password
Number of times and maximum number of days a user can log in using
an expired password.
Password complexity
Whether the following password complexity checking is enabled:
• username checking—Whether a password contains the username
or the reverse of the username.
• repeated characters checking—Whether a password contains any
character that is repeated consecutively three or more times.
display password-control blacklist
Use display password-control blacklist to display information about users added to the password control
blacklist due to authentication failure.
Syntax
display password-control blacklist [ user-name name | ip ipv4-address | ipv6 ipv6-address ] [ | { begin
| exclude | include } regular-expression ]