Users Guide

○ sha-256 — Use a SHA-256 encrypted password.
○ sha-512 — Use a SHA-512 encrypted password.
● priv-lvl privilege-level — Enter a privilege number from 1 to 15.
Defaults Not configured
Command Mode CONFIGURATION
Usage
Information
To increase the required password strength, create stronger password rules using the password-
attributes command. The no version of this command removes a privilege-level password.
Example
OS10(conf)# enable password 0 P@$$w0Rd priv-lvl 12
OS10(conf)# enable password sha-256 $5$2uThib1o$84p.tykjmz/
w7j26ymoKBjrb7uepkUB priv-lvl 12
OS10(conf)# enable password sha-512
$6$Yij02Phe2n6whp7b$ladskj0HowijIlkajg981 priv-lvl 12
OS10# enable 12
password:
OS10# show privilege
Current privilege level is 12.
Supported
Releases
10.4.3.0 or later
password-attributes
Configures rules for password entries.
Syntax
password-attributes {[min-length number] [character-restriction {[upper
number] [lower number] [numeric number] [special-char number]}}
Parameters
● min-length number — (Optional) Sets the minimum number of required alphanumeric characters,
from 6 to 32; default 9.
● character-restriction:
○ upper number — (Optional) Sets the minimum number of uppercase characters required, from
0 to 31; default 0.
○ lower number — (Optional) Sets the minimum number of lowercase characters required, from 0
to 31; default 0.
○ numeric number — (Optional) Sets the minimum number of numeric characters required, from
0 to 31; default 0.
○ special-char number — (Optional) Sets the minimum number of special characters required,
from 0 to 31; default 0.
Default
● Minimum length: 9 characters
● Uppercase characters: 0
● Lowercase characters: 0
● Numeric characters: 0
● Special characters: 0
Command Mode EXEC
Usage
Information
By default, the password you configure with the username password command must be at least nine
alphanumeric characters.
Use this command to increase password strength. When you enter the command, at least one parameter
is required. When you enter the character-restriction parameter, at least one option is required.
To reset parameters to their default values, use the no password-attributes command.
1114 Security