R0106-HP MSR Router Series Security Configuration Guide(V7)

187
Ste
p
Command Remarks
5. Configure the password
composition policy for the user
group.
password-control composition
type-number type-number
[ type-length type-length ]
By default, the password
composition policy of the user
group equals the global password
composition policy.
6. Configure the password
complexity checking policy for
the user group.
password-control complexity
{ same-character | user-name }
check
By default, the password
complexity checking policy of the
user group equals the global
password complexity checking
policy.
7. Configure the login attempt
limit.
password-control login-attempt
login-times [ exceed { lock |
lock-time time | unlock } ]
By default, the login-attempt policy
of the user group equals the global
login-attempt policy.
Setting local user password control parameters
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a device management
user and enter local user view.
local-user user-name class manage
By default, no local user exists.
Local user password control
applies to device management
users instead of network access
users.
For information about how to
configure a local user, see
"Configuring AAA."
3. Configure the password
expiration time for the local
user.
password-control aging aging-time
By default, the setting equals that
for the user group to which the
local user belongs. If no expiration
time is configured for the user
group, the global setting applies to
the local user.
4. Configure the minimum
password length for the local
user.
password-control length length
By default, the setting equals that
for the user group to which the
local user belongs. If no minimum
password length is configured for
the user group, the global setting
applies to the local user.
5. Configure the password
composition policy for the local
user.
password-control composition
type-number type-number
[ type-length type-length ]
By default, the settings equal those
for the user group to which the
local user belongs. If no password
composition policy is configured
for the user group, the global
settings apply to the local user.