Administrator Guide

Version Description
9.9(0.0) Introduced on the C9010.
9.2(1.0) Introduced on the Z9500.
8.3.19.0 Introduced on the S4820T.
8.3.11.1 Introduced on the Z9000.
8.3.7.0 Introduced on the S4810.
7.6.1.0 Introduced on the S-Series.
7.5.1.0 Introduced on the C-Series.
6.1.1.0 Introduced on the E-Series.
Usage
Information
The software prompts users for these passwords when the method for authentication or authorization
used is "line".
Related
Commands
enable password — sets the password for the enable command.
login authentication — configures an authentication method to log in to the switch.
service password-encryption — encrypts all passwords configured in the system.
radius-server key — configures a key for all RADIUS communications between the switch and the
RADIUS host server.
tacacs-server key — configures a key for communication between a TACACS+ server and client.
username — establishes an authentication system based on user names.
password-attributes
Configure the password attributes (strong password).
C9000 Series
Syntax
password-attributes [min-length number] [max-retry number] [lockout-period
minutes][character-restriction [upper number] [lower number] [numeric
number] [special-char number]]
To return to the default, use the no password-attributes [min-length number] [max-
retry number] [lockout-period minutes] [character-restriction [upper
number] [lower number] [numeric number] [special-char number]] command.
Parameters
min-length
number
(OPTIONAL) Enter the keywords min-length then the number of characters.
The range is from 0 to 32 characters.
max-retry
number
(OPTIONAL) Enter the keywords max-retry then the number of maximum
password retries. The range is from 0 to 16.
lockout-period
minutes
(OPTIONAL) Enter the keyword lockout-period then the number of minutes.
The range is from 1 to 1440 minutes. The default is 0 minutes and the lockout-
period is not enabled. This parameter enhances the security of the switch by
locking out sessions on the Telnet or SSH sessions for which there has been a
consecutive failed login attempts. The console is not locked out.
character-
restriction
(OPTIONAL) Enter the keywords character-restriction to indicate a
character restriction for the password.
upper number (OPTIONAL) Enter the keyword upper then the upper number. The range is from
0 to 31.
lower number (OPTIONAL) Enter the keyword lower then the lower number. The range is from
0 to 31.
Security 1525