3Com Switch 8800 Advanced Software V5 Configuration Guide

976 CHAPTER 74: PASSWORD CONTROL CONFIGURATION
■ For super passwords, the settings for super password override those in system
view unless the former are not provided.
Enabling Password
Control
Among the nine password control functions, you can enable or disable the
following four functions as desired:
■ Password aging
■ Minimum password length
■ Password history
■ Password composition
You must enable a function for its relevant configurations to take effect.
Follow these steps to enable a password control function:
Setting Global Password
Control Parameters
Follow these steps to set global password control parameters:
To do... Use the command... Remarks
Enter system view system-view -
Enable a password control
function
password-control { aging |
length | history |
composition } enable
Optional
All of the four password
control functions are enabled
by default.
To do... Use the command... Remarks
Enter system view system-view -
Set the password aging time password-control aging
aging-time
Optional
90 days by default
Set the minimum password
length
password-control length
length
Optional
10 characters by default
Configure the password
composition policy
password-control
composition type-number
policy-type [ type-length
type-length ]
Optional
By default, the minimum
number of password
composition types is 1 and
the minimum number of
characters of a password
composition type is 1 too.
Set the maximum number of
history password records for
each user
password-control history
max-record-num
Optional
4 by default
Specify the maximum number
of login attempts and the
action to be taken when a
user fails to login after the
specified number of attempts
password-control
login-attempt login-times [
exceed { lock | unlock |
lock-time time } ]
Optional
By default, the maximum
number of login attempts is 3
and a user failing to login
after the specified number of
attempts must wait for 120
minutes before trying again.
Set the number of days
during which the user is
warned of the pending
password expiration
password-control
alert-before-expire
alert-time
Optional
7 days by default