White Papers

password
Specify a password for users on terminal lines.
Syntax
password [encryption-type] password
To delete a password, use the no password password command.
Parameters
encryption-type (OPTIONAL) Enter either zero (0) or 7 as the encryption type for the password
entered. The options are
● 0 is the default and means the password is not encrypted and stored as clear
text.
● 7 means that the password is encrypted and hidden.
password Enter a text string up to 32 characters long. The first character of the password
must be a letter. You cannot use spaces in the password.
Defaults No password is configured.
Command Modes LINE
Supported Modes Full–Switch
Command
History
Version Description
9.9(0.0) Introduced on the FN IOM.
8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module.
Usage
Information
The system prompts users for these passwords when the method for authentication or authorization used
is "line".
Related
Commands
enable password — sets the password for the enable command.
login authentication — configures an authentication method to log in to the switch.
service password-encryption — encrypts all passwords configured in the system.
radius-server key — configures a key for all RADIUS communications between the switch and the
RADIUS host server.
tacacs-server key — configures a key for communication between a TACACS+ server and client.
username — establishes an authentication system based on user names.
password-attributes
Configure the password attributes (strong password).
Syntax
password-attributes [min-length number] [max-retry number] [lockout-period
minutes][character-restriction [upper number] [lower number] [numeric
number] [special-char number]]
To return to the default, use the no password-attributes [min-length number]
[max-retry number] [lockout-period minutes] [character-restriction [upper
number] [lower number] [numeric number] [special-char number]] command.
Parameters
min-length
number
(OPTIONAL) Enter the keywords min-length then the number of characters.
The range is from 0 to 32 characters.
max-retry
number
(OPTIONAL) Enter the keywords max-retry then the number of maximum
password retries. The range is from 0 to 16.
lockout-period
minutes
(OPTIONAL) Enter the keyword lockout-period then the number of minutes.
The range is from 1 to 1440 minutes. The default is 0 minutes and the lockout-
period is not enabled. This parameter enhances the security of the switch by
1026 Security