R21xx-HP FlexFabric 11900 Security Command Reference

23
<Sysname> system-view
[Sysname] local-user user2 class network
[Sysname-luser-network-user2]
Related commands
• display local-user
• service-type
password
Use password to configure a password for a local user.
Use undo password to delete the password of a local user.
Syntax
In non-FIPS mode:
password [ { cipher | hash | simple } password ]
undo password
In FIPS mode:
password
Default
A local user has no password configured.
Views
Local user view
Predefined user roles
network-admin
Parameters
cipher: Sets a ciphertext password.
hash: Sets a hashed password.
simple: Sets a plaintext password.
password: Specifies the password string. This argument is case sensitive. In non-FIPS mode, a cipher
password is a string of 1 to 117 characters, a hashed password is a string of 1 to 110 characters, and a
plaintext password is a string of 1 to 63 characters. In FIPS mode, the password is a plaintext string of
15 to 63 characters and must contain numbers, uppercase letters, lowercase letters, and special
characters.
Usage guidelines
With none of the parameters specified or in FIPS mode, you enter the interactive mode to set a plaintext
password. Only device management users support passwords configured in interactive mode.
In non-FIPS mode, a non-password-protected user passes authentication if the user provides the correct
username and passes attribute checks. To enhance security, configure a password for each local user. In
FIPS mode, only password-protected users can pass authentication.
Device management users support plaintext and hashed passwords. Network access users support
plaintext and ciphertext passwords. For security purpose, all passwords, including passwords configured
in plain text, are saved in ciphertext, hashed or encrypted.