F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Configuration Guide-6PW100
278
{ For super passwords, the settings configured specifically for super passwords, if any, override
those configured in system view.
To configure password control:
Task Remarks
795H
Enabling password control Required.
796H
Setting global password control parameters Optional.
797H
Setting user group password control parameters Optional.
798H
Setting local user password control parameters Optional.
799H
Setting super password control parameters Optional.
800H
Setting a local user password in interactive mode Optional.
82B
Enabling password control
1. Enable the global password control feature in system view.
Password control configurations take effect only after the password control feature is enabled
globally.
2. Enable password control functions individually.
The following password control functions need to be enabled individually after the password
control feature is enabled globally:
{ Password aging
{ Minimum password length
{ Password history
{ Password composition checking
To enable password control:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Enable the global password
control feature.
password-control enable Disabled by default.
3. Enable a specific password
control function.
password-control { aging |
composition | history | length }
enable
Optional.
All of the four password control
functions are enabled by default.
After global password control is enabled, local user passwords configured on the firewall are not
displayed when you use the corresponding display command.
83B
Setting global password control parameters
The action specified the password-control login-attempt command takes effect immediately, and thus
affects the users already in the password control blacklist. Other password control configurations take
effect only for users logging in later and passwords configured later.