R3721-F3210-F3171-HP High-End Firewalls Access Control Configuration Guide-6PW101
242
Ste
p
Command
Remarks
3. Configure the password
aging time for the local user.
password-control aging aging-time
Optional.
By default, the setting for the user
group to which the local user
belongs is used; if no aging time is
configured for the user group, the
setting in system view is used.
4. Configure the minimum
password length for the local
user.
password-control length length
Optional.
By default, the setting for the user
group to which the local user
belongs is used; if no minimum
password length is configured for
the user group, the setting in
system view is used.
A password must contain at least
eight characters.
5. Configure the password
composition policy for the
local user.
password-control composition
type-number type-number
[ type-length type-length ]
Optional.
By default, the settings for the user
group to which the local user
belongs are used; if no password
composition policy is configured
for the user group, the settings in
system view are used.
In FIPS mode, a password must
contain four types of characters.
Setting super password control parameters
CLI commands fall into four levels: visit, monitor, system, and manage, in ascending order. Accordingly,
login users fall into four levels, each corresponding to a command level. A user of a certain level can only
use the commands at that level or lower levels.
To switch from a lower user level to a higher one, a user needs to enter a password for authentication.
This password is called a super password. For more information about super passwords, see Getting
Started Guide.
To set super password control parameters:
Ste
p
Command
Remarks
1. Enter system view.
system-view N/A
2. Set the password aging time
for super passwords.
password-control super aging
aging-time
Optional.
90 days by default.
3. Configure the minimum length
for super passwords.
password-control super length
length
Optional.
10 characters by default.
A password must contain at least
eight characters.