R211x-HP Flexfabric 11900 Security Command Reference

140
network-operator
mdc-admin
mdc-operator
Parameters
user-name name: Specifies a user by its name, a case-sensitive string of 1 to 55 characters.
ip ipv4-address: Specifies the IPv4 address of a user.
ipv6 ipv6-address: Specifies the IPv6 address of a user.
Usage guidelines
With no arguments provided, this command displays information about all users in the password control
blacklist.
If an FTP or virtual terminal line (VTY) user fails authentication, the system adds the user to a password
control blacklist. You can use this command to view information about these users in the blacklist.
Users accessing the system through the console ports are not blacklisted, because the system is unable to
obtain the IP addresses of these users and these users are privileged and therefore relatively secure to the
system.
Examples
# Display information about users in the password control blacklist.
<Sysname> display password-control blacklist
Username: test
IP: 192.168.44.1 Login failures: 1 Lock flag: unlock
Blacklist items matched: 1.
Table 16 Command output
Field Descri
p
tion
IP IP address of the user.
Login failed times Number of login failures.
Lock flag
Whether the user is prohibited from logging in:
• unlock—Not prohibited.
• lock—Prohibited temporarily or permanently, depending on the
password-control login-attempt command.
Blacklist items matched Number of blacklisted users.
password-control { aging | composition | history | length }
enable
Use password-control { aging | composition | history | length } enable to enable the password
expiration, composition restriction, history, or minimum length restriction function.
Use undo password-control { aging | composition | history | length } enable to disable a password
control function.