R3721-F3210-F3171-HP High-End Firewalls Access Control Configuration Guide-6PW101

239
• Settings in user group view apply to the passwords of all local users in the user group.
• Settings in local user view apply to only the password of the local user.
• Settings for super passwords apply to only super passwords.
The above four types of settings have different priorities:
• For local user passwords, the settings with a smaller application range have a higher priority.
• For super passwords, the settings configured specifically for super passwords, if any, override those
configured in system view.
Complete the following tasks to configure password control:
Task Remarks
Enabling password control Required
Setting global password control parameters Optional
Setting user group password control parameters Optional
Setting local user password control parameters Optional
Setting super password control parameters Optional
Setting a local user password in interactive mode Optional
Configuring password control
Enabling password control
To enable password control functions, you must:
1. Enable the password control feature in system view. Only after the password control feature is
enabled globally, can password control configurations take effect.
2. Enable password control functions. Some password control functions need to be enabled
individually after the password control feature is enabled globally. These functions include:
{ Password aging
{ Minimum password length
{ Password history
{ Password composition checking
You must enable a function for its relevant configurations to take effect.
To enable password control:
Ste
p
Command Remarks
1. Enter system view. system-view N/A
2. Enable the password control
feature.
password-control enable Disabled by default.
3. Enable a password control
function individually.
password-control { aging |
composition | history | length }
enable
Optional.
All of the four password control
functions are enabled by default.