R3303-HP HSR6800 Routers Security Configuration Guide

192
Password control configuration task list
The password control functions can be configured in several views, and different views support different
functions. The settings configured in different views or for different objects have different application
ranges and different priorities:
• Settings for super passwords apply only to super passwords.
• Settings in local user view apply only to the password of the local user.
• Settings in user group view apply to the passwords of the local users in the user group if you do not
configure password policies for these users in local user view.
• Global settings in system view have the following application situations:
{ They apply to the passwords of local users in all user groups if you do not configure password
policies for these users in both local user view and user group view.
{ They apply to the super passwords if you do not configure password policies for super
passwords.
The previous four types of settings have the following priorities:
{ For local user passwords, the settings with a smaller application range have higher priority.
{ For super passwords, the settings configured specifically for super passwords, if any, override
those configured globally.
To configure password control:
Task Remarks
Enabling password control Required.
Setting global password control parameters Optional.
Setting user group password control parameters Optional.
Setting local user password control parameters Optional.
Setting super password control parameters Optional.
Setting a local user password in interactive mode Optional.
Enabling password control
To enable password control functions:
1. Enable the global password control feature in system view.
Password control configurations take effect only after the password control feature is enabled
globally.
2. Enable password control functions individually.
The following password control functions need to be enabled individually after the password
control feature is enabled globally:
{ Password aging
{ Minimum password length
{ Password history