F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

253
Parameters
type-number type-number: Specifies the minimum number of character types that a password must
contain. The value range for the type-number argument is 1 to 4. In FIPS mode, type-number must be 4.
type-length type-length: Specifies the minimum number of characters that each type must contain. The
value rang for the type-length argument is 1 to 63.
Usage guidelines
The settings in system view have global significance and apply to all user groups, the settings in user
group view apply to all local users in the user group, and the settings in local user view apply to only the
local user.
A password composition policy with a smaller application range has a higher priority. That is, the system
prefers the settings for a local user. If there is no setting for the local user, the system will use the settings
for the user group. If there is no setting for the user group, the system will use the global settings.
Examples
# Specify that all passwords must each contain at least three types of characters and each type must
contain at least five characters.
<Sysname> system-view
[Sysname] password-control composition type-number 3 type-length 5
# Specify that passwords in user group test must contain at least three types of characters and each type
must contain at least five characters.
[Sysname] user-group test
[Sysname-ugroup-test] password-control composition type-number 3 type-length 5
[Sysname-ugroup-test] quit
# # Specify that the password of local user abc must contain at least three types of characters and each
type must contain at least five characters.
[Sysname] local-user abc
[Sysname-luser-abc] password-control composition type-number 3 type-length 5
Related commands
• display password-control
• local-user
• user-group
password-control enable
Use password-control enable to enable the password control feature globally.
Use undo password-control enable to disable the password control feature globally.
Syntax
password-control enable
undo password-control enable
Default
The password control feature is disabled globally.
Views
System view