3Com Switch 8800 Family Configuration Guide

Introduction to Password Control Configuration 873
Configuring the maximum number of history password records
When a password used to log in to the system expires, the system will ask the user
to enter a new password and will automatically save the password. You can
configure the maximum number of history records allowable for each user. The
purpose is to prevent users from using a single password or repeated passwords,
thus enhancing the security.
c
CAUTION:
■ When a new password is added but the number of the recorded history
passwords has reached the configured maximum number, the system replaces
the oldest record with the new one.
■ When you configure the maximum number of history password records, if the
number of history password records is larger than the configured value, the
system will give a prompt and allow you to make configuration for the user.
■ When changing a password, do not use any recorded history password;
otherwise, the system will give the following prompt: The system failed
to assign password. It has been used previously. In this case,
the change to the password will not take effect, and you need to configure
another password.
Configuring the timeout time for password authentication
An authentication process for a user starts when the server obtains the user name
and ends when the password authentication is completed for the user.
If the password authentication is not completed before the authentication times
out, the authentication fails, and the system will terminate the user connection
and record the log information; if the password authentication is completed
before the authentication times out, the user will log in to the switch normally.
View information of users
added to the blacklist
display password-control
blacklist
display can be carried out in
any view
Remove a user or users from
the blacklist
reset password-control
blacklist [ username
username ]
If the command is carried out
without username, all users
will be removed from the
blacklist
If the command is carried out
with username, the specified
user will be removed from the
blacklist
Tab le 825 Configuring the maximum number of history password records
Operation Command Description
Enter system view system-view -
Configure the maximum
number of history password
records
password-control history
max-record-num
The value range of maximum
number of history password
records is 2 to 10, and the
default value is 4
Table 824 Configuring the maximum number of attempts and the processing mode for
failed login attempts
Operation Command Description