HP VPN Firewall Appliances Access Control Command Reference

246
password-control composition
Use password-control composition to configure the password composition policy.
Use undo password-control composition to restore the default.
Syntax
password-control composition type-number type-number [ type-length type-length ]
undo password-control composition
Default
In non-FIPS mode, the global password composition policy is as follows: A password must contain at
least one type of characters from uppercase letters, lowercase letters, digits or special characters (see
"password")
, and each type of characters in the password contains at least one character. The password
compo
sition policy of a user group is the same as the global policy. The password composition policy of
a local user is the same as that of the user group to which the local user belongs.
In FIPS mode, all passwords configured in any view must contain four types of characters from uppercase
letters, lowercase letters, digits and special characters, and each type contains at least one character.
The password composition policy of a user group is the same as the global policy. The password
composition policy of a local user is the same as that of the user group to which the local user belongs.
Views
System view, user group view, local user view
Default command level
2: System level
Parameters
type-number type-number: Specifies the minimum number of character types that a password must
contain. The value range for the type-number argument is 1 to 4 in non-FIPS mode and fixed at 4 in FIPS
mode.
type-length type-length: Specifies the minimum number of characters that each type must contain. The
value rang for the type-length argument is 1 to 63.
Usage guidelines
The settings in system view have global significance and apply to all user groups. The settings in user
group view apply to all local users in the user group. The settings in local user view apply to only the local
user.
A password composition policy with a smaller application range has higher priority. The system prefers
the settings for a local user. If there is no setting for the local user, the system will use the settings for the
user group. If there is no setting for the user group, the system will use the global settings.
Examples
# Specify that all passwords must each contain at least three types of characters and each type must
contain at least five characters.
<Sysname> system-view
[Sysname] password-control composition type-number 3 type-length 5
# Specify that passwords in user group test must contain at least three types of characters and each type
must contain at least five characters.
[Sysname] user-group test