F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

250
Default
The global password aging time is 90 days, the password aging time of a user group equals the global
setting, and the password aging time of a local user equals that of the user group to which the local user
belongs.
Views
System view, user group view, local user view
Default command level
2: System level
Parameters
aging-time: Password aging time in days, in the range of 1 to 365.
Usage guidelines
The setting in system view has global significance and applies to all user groups, the setting in user group
view applies to all local users in the user group, and the setting in local user view applies to only the local
user.
A password aging time setting with a smaller application range has a higher priority. That is, the system
prefers the setting for a local user. If there is no setting for the local user, the system will use the setting for
the user group. If there is no setting for the user group, the system will use the global setting.
Examples
# Set the global password aging time to 80 days.
<Sysname> system-view
[Sysname] password-control aging 80
# Set the password aging time for user group test to 90 days.
[Sysname] user-group test
[Sysname-ugroup-test] password-control aging 90
[Sysname-ugroup-test] quit
# Set the password aging time for local user abc to 100 days.
[Sysname] local-user abc
[Sysname-luser-abc] password-control aging 100
Related commands
• display password-control
• local-user
• user-group
password-control alert-before-expire
Use password-control alert-before-expire to set the number of days before a user's password expires
during which the user is notified of the pending password expiration.
Use undo password-control alert-before-expire to restore the default.
Syntax
password-control alert-before-expire alert-time
undo password-control alert-before-expire