R3721-F3210-F3171-HP High-End Firewalls Access Control Command Reference-6PW101

173
Description
Use password-control aging to set the password aging time.
Use undo password-control aging to restore the default.
By default, the global password aging time is 90 days, the password aging time of a user group equals
the global setting, and the password aging time of a local user equals that of the user group to which the
local user belongs.
The setting in system view has global significance and applies to all user groups, the setting in user group
view applies to all local users in the user group, and the setting in local user view applies to only the local
user.
A password aging time setting with a smaller application range has a higher priority. That is, the system
prefers the setting for a local user. If there is no setting for the local user, the system will use the setting for
the user group. If there is no setting for the user group, the system will use the global setting.
Related commands: display password-control, local-user, and user-group.
Examples
# Set the global password aging time to 80 days.
<Sysname> system-view
[Sysname] password-control aging 80
# Set the password aging time for user group test to 90 days.
[Sysname] user-group test
[Sysname-ugroup-test] password-control aging 90
[Sysname-ugroup-test] quit
# Set the password aging time for local user abc to 100 days.
[Sysname] local-user abc
[Sysname-luser-abc] password-control aging 100
password-control alert-before-expire
Syntax
password-control alert-before-expire alert-time
undo password-control alert-before-expire
View
System view
Default level
2: System level
Parameters
alert-time: Number of days before a user's password expires during which the user is warned of the
pending password expiration, in the range of 1 to 30.
Description
Use password-control alert-before-expire to set the number of days before a user's password expires
during which the user is warned of the pending password expiration.
Use undo password-control alert-before-expire to restore the default.