R211x-HP Flexfabric 11900 Security Command Reference

154
Examples
# Set the super passwords to expire after 10 days.
<Sysname> system-view
[Sysname] password-control super aging 10
Related commands
• display password-control
• password-control aging
password-control super composition
Use password-control super composition to configure the composition policy for super passwords.
Use undo password-control super composition to restore the default.
Syntax
password-control super composition type-number type-number [ type-length type-length ]
undo password-control super composition
Default
In non-FIPS mode, a super password must contain at least one character type and at least one character
for each type.
In FIPS mode, a super password must contain at least four character types and at least one character for
each type.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
type-number type-number: Specifies the minimum number of character types that a super password must
contain. The value range for the type-number argument is 1 to 4 in non-FIPS mode and fixed at 4 in FIPS
mode.
type-length type-length: Specifies the minimum number of characters for each character type. The value
range for the type-length argument is 1 to 63 in non-FIPS mode, and 1 to 15 in FIPS mode.
Usage guidelines
The product of the minimum number of character types and minimum number of characters for each type
must be smaller than the maximum length of the super password.
Examples
# Specify that a super password must contain at least four character types and at least five characters for
each type.
<Sysname> system-view
[Sysname] password-control super composition type-number 4 type-length 5