R21xx-HP FlexFabric 11900 Security Command Reference
87
Usage guidelines
The password composition policy in system view has global significance and applies to all user groups.
The policy in user group view applies to all local users in the user group. The policy in local user view
applies only to the local user.
A password composition policy with a smaller application scope has higher priority. The system prefers
to use the password composition policy in local user view for a local user. If no policy is configured for
the local user, the system uses the policy for the user group to which the local user belongs. If no policy
is configured for the user group, the system uses the global policy.
The product of the minimum number of character types and minimum number of characters for each type
must be smaller than the maximum length of passwords.
Examples
# Specify that all passwords must each contain at least three types of characters and each type must
contain at least five characters.
<Sysname> system-view
[Sysname] password-control composition type-number 3 type-length 5
# Specify that passwords in user group test must contain at least three types of characters and each type
must contain at least five characters.
[Sysname] user-group test
[Sysname-ugroup-test] password-control composition type-number 3 type-length 5
[Sysname-ugroup-test] quit
# Specify that the password of device management user abc must contain at least three types of
characters and each type must contain at least five characters.
[Sysname] local-user abc class manage
[Sysname-luser-manage-abc] password-control composition type-number 3 type-length 5
Related commands
• display password-control
• password-control composition enable
password-control enable
Use password-control enable to enable the password control feature globally.
Use undo password-control enable to disable the password control feature globally.
Syntax
password-control enable
undo password-control enable
Default
The password control feature is disabled globally.
Views
System view
Predefined user roles
network-admin










