Administrator Guide

Version Description
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
Usage Information The software prompts users for these passwords when the method for authentication or authorization used is
"line".
Related
Commands
enable password — sets the password for the enable command.
login authentication — configures an authentication method to log in to the switch.
service password-encryption — encrypts all passwords configured in the system.
radius-server key — configures a key for all RADIUS communications between the switch and the RADIUS host
server.
tacacs-server key — configures a key for communication between a TACACS+ server and client.
username — establishes an authentication system based on user names.
password-attributes
Configure the password attributes (strong password).
C9000 Series
Syntax
password-attributes [min-length number] [max-retry number] [lockout-period
minutes][character-restriction [upper number] [lower number] [numeric number]
[special-char number]]
To return to the default, use the no password-attributes [min-length number] [max-retry
number] [lockout-period minutes] [character-restriction [upper number] [lower
number] [numeric number] [special-char number]] command.
Parameters
min-length
number
(OPTIONAL) Enter the keywords min-length then the number of characters. The
range is from 0 to 32 characters.
max-retry number (OPTIONAL) Enter the keywords max-retry then the number of maximum password
retries. The range is from 0 to 16.
lockout-period
minutes
(OPTIONAL) Enter the keyword lockout-period then the number of minutes. The
range is from 1 to 1440 minutes. The default is 0 minutes and the lockout-period is not
enabled. This parameter enhances the security of the switch by locking out sessions on
the Telnet or SSH sessions for which there has been a consecutive failed login attempts.
The console is not locked out.
character-
restriction
(OPTIONAL) Enter the keywords character-restriction to indicate a character
restriction for the password.
upper number (OPTIONAL) Enter the keyword upper then the upper number. The range is from 0 to
31.
lower number (OPTIONAL) Enter the keyword lower then the lower number. The range is from 0 to
31.
numeric number (OPTIONAL) Enter the keyword numeric then the numeric number. The range is from 0
to 31.
special-char
number
(OPTIONAL) Enter the keywords special-char then the number of special characters
permitted. The range is from 0 to 31.
Defaults 0 minutes for the lock out period. The lockout-period is not enabled.
Command Modes CONFIGURATION
Security 1463