R3303-HP HSR6800 Routers Security Command Reference

214
<Sysname> system-view
[Sysname] password-control history 10
password-control length
Use password-control length to set the minimum password length.
Use undo password-control length to restore the default.
Syntax
password-control length length
undo password-control length
Default
The global minimum password length is 10 characters. The minimum password length of a user group
equals the global setting. The minimum password length of a local user equals that of the user group to
which the local user belongs.
Views
System view, user group view, local user view
Default command level
2: System level
Parameters
length: Specifies the minimum password length in characters. The value range for this argument is 4 to
32 in non-FIPS mode, and 8 to 32 in FIPS mode.
Usage guidelines
The setting in system view has global significance and applies to all user groups. The setting in user
group view applies to all local users in the user group. The setting in local user view applies only to the
local user.
A minimum password length setting with a smaller application range has higher priority. The system
prefers to use the minimum password length in local user view for a local user. If no minimum password
length is configured for the local user, the system uses the minimum password length for the user group.
If no minimum password length is configured for the user group, the system uses the global minimum
password length.
When global password control is enabled but the minimum password length restriction function is
disabled, the following rules apply:
• In non-FIPS mode, the minimum password length is four characters, and the password must have at
least four different characters.
• In FIPS mode, the minimum password length is eight characters, and the password must have at
least four different characters.
Examples
# Set the global minimum password length to 9 characters.
<Sysname> system-view
[Sysname] password-control length 9
# Set the minimum password length to 9 characters for user group test.
[Sysname] user-group test