R2511-HP MSR Router Series Security Command Reference(V5)

528
Views
System view, user group view, local user view
Default command level
2: System level
Parameters
aging-time: Specifies the password aging time in days, in the range of 1 to 365.
Usage guidelines
The aging time depends on the view:
• The time in system view has global significance and applies to all user groups.
• The time in user group view applies to all local users in the user group.
• The time in local user view applies only to the local user.
A password aging time with a smaller application scope has higher priority. The system prefers to use the
password aging time in local user view for a local user. If no password aging time is configured for the
local user, the system uses the password aging time for the user group to which the local user belongs.
If no password aging time is configured for the user group, the system uses the global password aging
time.
Examples
# Globally set the passwords to expire after 80 days.
<Sysname> system-view
[Sysname] password-control aging 80
# Set the passwords for user group test to expire after 90 days.
[Sysname] user-group test
[Sysname-ugroup-test] password-control aging 90
[Sysname-ugroup-test] quit
# Set the password for local user abc to expire after 100 days.
[Sysname] local-user abc
[Sysname-luser-abc] password-control aging 100
Related commands
• display password-control
• local-user
• user-group
password-control alert-before-expire
Use password-control alert-before-expire to set the number of days before a user's password expires
during which the user is notified of the pending password expiration.
Use undo password-control alert-before-expire to restore the default.
Syntax
password-control alert-before-expire alert-time
undo password-control alert-before-expire