R2511-HP MSR Router Series Security Command Reference(V5)

532
Use undo password-control enable to disable the password control feature globally.
Syntax
password-control enable
undo password-control enable
Default
In non-FIPS mode, the password control feature is disabled globally.
In FIPS mode, the password control feature is enabled globally and cannot be disabled.
Views
System view
Default command level
2: System level
Usage guidelines
The password control functions take effect only after the password control feature is enabled globally.
In FIPS mode, you cannot disable the global password control feature even after you execute the undo
password-control enable command.
Examples
# Enable the password control feature globally.
<Sysname> system-view
[Sysname] password-control enable
Related commands
display password-control
password-control expired-user-login
Use password-control expired-user-login to set the maximum number of days and maximum number of
times that a user can log in after the password expires.
Use undo password-control expired-user-login to restore the defaults.
Syntax
password-control expired-user-login delay delay times times
undo password-control expired-user-login
Default
A user can log in three times within 30 days after the password expires.
Views
System view
Default command level
2: System level
Parameters
delay: Specifies the maximum number of days during which a user can log in using an expired password.
It must be in the range of 1 to 90.