R3303-HP HSR6800 Routers Security Command Reference

217
<Sysname> system-view
[Sysname] password-control login-attempt 2 exceed lock-time 3
Later, if a user tries to log in but fails two times, you can find it in the password control blacklist with its
status changed from unlock to lock:
[Sysname] display password-control blacklist
Username: test
IP: 192.168.44.1 Login failed times: 2 Lock flag: lock
Total 1 blacklist item(s) matched. 1 listed.
After 3 minutes, the user is removed from the password control blacklist and can log in again.
Related commands
• display password-control
• display password-control blacklist
• reset password-control blacklist
password-control password update interval
Use password-control password update interval to set the minimum password update interval, that is,
the minimum interval at which users can change their passwords.
Use undo password-control password update interval to restore the default.
Syntax
password-control password update interval interval
undo password-control password update interval
Default
The minimum password update interval is 24 hours.
Views
System view
Default command level
2: System level
Parameters
interval: Specifies the minimum password update interval in hours, in the range of 0 to 168. 0 means no
requirements for password update interval.
Usage guidelines
This function is not effective in the case that a user is prompted to change the password when the user
logs in for the first time or after the password is aged out.
Examples
# Set the minimum password update interval to 36 hours.
<Sysname> system-view
[Sysname] password-control password update interval 36
Related commands
display password-control