Concept Guide

aaa password-policy mgmt
aaa password-policy mgmt
enable
no
password-lock-out
password-lock-out-time
password-max-character-repeat.
password-min-digit
password-min-length
password-min-lowercase-characters
password-min-special-character
password-min-special-character
password-min-uppercase-characters
password-not-username
Description
Define a policy for creating management user passwords.
Syntax
Parameter Description
enable enable the password management policy
password-lock-out The number of failed attempts within a 3 minute window that causes the
user to be locked out for the period of time specified by the password-lock-
out-time parameter.
Range: 0-10 attempts. By default, the password lockout feature is disabled,
and the default value of this parameter is 0 attempts.
password-lock-out-time The number of minutes a user who has exceeded the maximum number of
failed password attempts is locked out of the network. After this period has
passed, the lockout is cleared without administrator intervention.
Range: 1 min to 1440 min (24 hrs). Default: 3.
NOTE: When a management user gets locked out, that event is logged in
the controller log file. The management user lockout warning message
can have any one of the following warning IDs.
l 125060 = Password policy locked out a management user created via
the mgmt-user command in the serial console CLI.
l 125061 = Password policy locked out a management user created via
the WebUI or the mgmt-user command in the Telnet/SSH CLI.
l 133109 = Password policy locked out a management user created via
the local-userdb command in the CLI.
password-max-character-
repeat
The maximum number of consecutive repeating characters allowed in a
management user password.
Range: 0-10 characters. By default, there is no limitation on the numbers
of character that can repeat within a password, and the parameter has a
default value of 0 characters.
Dell Networking W-Series ArubaOS 6.5.x | Reference Guide aaa password-policy mgmt | 93