R21xx-HP FlexFabric 11900 Security Configuration Guide

# Prohibit the user from logging in forever after two successive login failures.

[Sysname] password-control login-attempt 2 exceed lock

# Globally set all passwords to expire after 30 days.

[Sysname] password-control aging 30

# Set the minimum password update interval to 36 hours.

[Sysname] password-control update-interval 36

# Specify that a user can log in five times within 60 days after the password expires.

[Sysname] password-control expired-user-login delay 60 times 5

# Set the maximum account idle time to 30 days.

[Sysname] password-control login idle-time 30

# Refuse any password that contains the username or the reverse of the username.

[Sysname] password-control complexity user-name check

# Specify that no character of the password can be repeated three or more times consecutively.

[Sysname] password-control complexity same-character check

# Specify that a super password must contain at least three types of characters and each type must

contain at least five characters.

[Sysname] password-control super composition type-number 3 type-length 5

# Configure a super password used for switching to user role network-operator as 12345 AB GFTweu ix in

plain text.

[Sysname] super password network-operator simple 12345ABGFTweuix

# Create a device management user named test.

[Sysname] local-user test class manage

# Set the service type of the user to Telnet.

[Sysname-luser-manage-test] service-type telnet

# Set the minimum password length to 12 for the local user.

[Sysname-luser-manage-test] password-control length 12

# Specify that the password of the local user must contain at least two types of characters and each type

must contain at least five characters.

[Sysname-luser-manage-test] password-control composition type-number 2 type-length 5

# Set the password for the local user to expire after 20 days.

[Sysname-luser-manage-test] password-control aging 20

# Configure the password of the local user in interactive mode.

[Sysname-luser-manage-test] password

Password:

Confirm :

Updating user information. Please wait ... ...

[Sysname-luser-manage-test] quit

Verifying the configuration

# Display the global password control configuration.

<Sysname> display password-control

Global password control configurations:

Password control: Enabled

Password aging: Enabled (30 days)