F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Command Reference-6PW100

256
A minimum password length setting with a smaller application range has a higher priority. That is, the
system prefers the setting for a local user. If there is no setting for the local user, the system will use the
setting for the user group. If there is no setting for the user group, the system will use the global setting.
Examples
# Set the global minimum password length to 9 characters.
<Sysname> system-view
[Sysname] password-control length 9
# Set the minimum password length to 9 characters for user group test.
[Sysname] user-group test
[Sysname-ugroup-test] password-control length 9
[Sysname-ugroup-test] quit
# Set the minimum password length to 9 characters for local user abc.
[Sysname] local-user abc
[Sysname-luser-abc] password-control length 9
Related commands
• display password-control
• local-user
• user-group
password-control login idle-time
Use password-control login idle-time to set the maximum account idle time. If a user account is idle for
this period of time, it becomes invalid.
Use undo password-control login idle-time to restore the default.
Syntax
password-control login idle-time idle-time
undo password-control login idle-time
Default
The maximum account idle time is 90 days.
Views
System view
Default command level
2: System level
Parameters
idle-time: Maximum account idle time, in the range of 0 to 365, in days. 0 means no restriction for
account idle time.
Examples
# Set the maximum account idle time to 30 days.
<Sysname> system-view
[Sysname] password-control login idle-time 30