R3303-HP HSR6800 Routers Security Configuration Guide

195
Setting local user password control parameters
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a local user and enter
local user view.
local-user user-name N/A
3. Configure the password
aging time for the local user.
password-control aging aging-time
Optional.
By default, the setting equals that
for the user group to which the
local user belongs. If no aging time
is configured for the user group,
the global setting applies to the
local user.
4. Configure the minimum
password length for the local
user.
password-control length length
Optional.
By default, the setting equals that
for the user group to which the
local user belongs. If no minimum
password length is configured for
the user group, the global setting
applies to the local user.
5. Configure the password
composition policy for the
local user.
password-control composition
type-number type-number
[ type-length type-length ]
Optional.
By default, the settings equal those
for the user group to which the
local user belongs. If no password
composition policy is configured
for the user group, the global
settings apply to the local user.
Setting super password control parameters
CLI commands include four levels: visit, monitor, system, and manage, in ascending order. Accordingly,
login users are divided into four levels, each corresponding to a command level. A user of a certain level
can only use the commands at that level or lower levels.
To switch from a lower user level to a higher one, a user needs to enter a password for authentication.
This password is called a super password. For more information on super passwords, see Fundamentals
Configuration Guide.
To set super password control parameters:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Set the password aging time
for super passwords.
password-control super aging
aging-time
Optional.
By default, the super password
aging time is the same as the
global password aging time.