R3102-R3103-HP 6600/HSR6600 Routers Security Command Reference

220
password-control complexity
Use password-control complexity to configure the password complexity checking policy.
Complexity-incompliant passwords will be refused.
Use undo password-control complexity check to remove a password complexity checking item.
Syntax
password-control complexity { same-character | user-name } check
undo password-control complexity { same-character | user-name } check
Default
No user password complexity checking is performed, and a password can contain the username, the
reverse of the username, or a character repeated three or more times consecutively.
Views
System view
Default command level
2: System level
Parameters
same-character: Refuses a password that contains any character repeated consecutively three or more
times.
user-name: Refuses a password that contains the username or the reverse of the username.
Examples
# Configure the password complexity checking policy, refusing any password that contains the username
or the reverse of the username.
<Sysname> system-view
[Sysname] password-control complexity user-name check
Related commands
display password-control
password-control composition
Use password-control composition to configure the password composition policy.
Use undo password-control composition to restore the default.
Syntax
password-control composition type-number type-number [ type-length type-length ]
undo password-control composition
Default
In non-FIPS mode, the global password composition policy is as follows: A password must contain at
least one type of characters, for example, uppercase letters, lowercase letters, digits or special characters
(see "password")
, and each type of characters in the password must contain at least one character.