Reference Guide

AAA Commands 83
Example
The following example configures a minimum length of 8 characters required for passwords in
the local database.
passwords aging
The passwords aging Global Configuration mode command sets the expiration time of
username and enable passwords. To remove the password expiration time, use the no form of
this command.
Syntax
passwords aging username name days
no passwords aging username name
passwords aging enable-password level days
no passwords aging enable-password level
• days— The number of days before a password expires. (Range: 1-365)
•
name — The name of the user (Range: 1- 20 characters).
•
level — The level to which the password applies (Range: 1-15).
Default Configuration
No password expiration time.
Command Mode
Global Configuration mode
User Guidelines
• Relevant to local user passwords, line passwords, and enable passwords.
• The password expiration date is calculated from the day the password is defined, and not from
the day aging time is defined.
• Ten days before the password expiration date, the user receives a syslog warning to change the
password within "n" days. These warnings continue until the password expiration date.
• After the password expiration date, the user receives three chances to log in and change the
password. If the user still does not change the password, the account is locked.
• It is recommended that local device time be updated using an external SNTP clock.
Console(config)# passwords min-length 8