User`s guide

Configuring CLI Access Security
Matrix DFE Series and N-SA User’s Guide 3-3
Forapasswordtobestrongandhardtobreak,itshould:
•Beatleast8characterslong.
Containcharactersfromeachofthefollowinggroups:
–Letters(uppercaseandlowercase)A,B,C;a,b,c
–Numerals0,1,2,3,4,5,6 ,7 ,8,9
–Symbols`~!@#$%^&*(
)_+‐={}|[]\:ʺ;ʹ<>?,./
•Haveatleastonesymbolcharacterinthesecondthroughsixthpositions.
•Besignificantlydifferentfrompriorpasswords.
•Notcontainyournameoruser name.
•Notbeacommonwordorname.
Managing System Passwords and User Accounts
Bydefault,theMatrixDFESeriesorNSAdeviceoperatesinsingleusermodewithpassword
accessenabledandnopasswordsdefined.Itprovidesthreeaccessmodes,oraccount“names.”
TheseareAdminorSuperUser(
su),ReadWrite(rw),andReadOnly(ro).Formoreinformation
aboutthesedefaultaccessaccountsandtheirassociatedprivileges,referbacktoTable 21on
page 22.Thissectionprovidesinformationaboutthefollowingsystempasswordanduser
accountmanagementtasksthatcanbecompletedbyanadministratorwithSuperUseraccess.
SettingNewSystemPasswords
CreatingandManagingUserAccounts
SettingPasswordPolicies,includingageouttime,thenumberofpreviouslyusedpasswords
checkedforduplicationwhenuserscreatenewpasswords,andthenumberoffailedlogin
attemptsallowedbeforeuserlockout.
Onceconfigured,passwordscanbechangedwiththesetpasswordcommand.Administrators
withSuperUseraccesscanchangeanypasswordonthesystemasdescribedinthefollowing
section.IndividualuserswithReadWriteaccesscanchangetheirownpasswords,asdescribedon
page35,butcannotenterormodifyothersystempasswords.Onlyuserswithadmin(
su)access
privilegescanchangeanypasswordonthesystem.
9 5,429,503,678,976 101,559,956,668,416
10 141,167,095,653,376 3,656,158,440,062,980
Table 3-1 Password Combinations (continued)
Number of Characters
in Password
Possible Combinations
(Letters A-Z only)
Possible Combinations
(Letters A-Z, with numbers 0-9)
Note: Unless otherwise specified, commands described in this section are restricted to
administrators with Super-User (su) access.