User's Manual

Fortress ES-Series CLI Guide: Mesh Point CLI and Administrative Access
14
Failures:
---------
Password changes rejected for history: 0
Password changes rejected for complexity: 0
Password changes rejected for uniqueness: 0
2.2.1.1 Password Complexity and Expiration
History Depth specifies how many new passwords must be
created for administrator accounts before previously used
passwords can be reused. Minimums can be set for the
numbers of upper- and lowercase letters, numerals, symbols,
and differences from the last password that passwords must
contain, along with the minimum total number of characters
(
Minimum Length) required.
By default, password expiration is disabled for locally
authenticated administrative accounts (
Expires: N ). When it is
enabled (
Expires: Y ), you can set the password expiration
period and configure the Mesh Point to warn administrators (at
logon) for a specified number of days in advance of expiration.
The password expiration period (
Expiration) can be set from
1 to 365 days (the default is 60). The Expiration warning can
be set from
0 (zero), which disables the warning, to 365 days
(the default is
10). In addition, you can direct the Mesh Point to
expire non-conforming passwords as soon as requirements
change (
Force reset to conforming password : Y, the default)
or allow them to persist until the next scheduled expiration (or
indefinitely, when scheduled expiration [
Expires] is disabled).
Unbroken alphabetic strings within administrator passwords
can also be checked against a list of known words and
checked for numerically or alphabetically consecutive
characters (in ascending or descending order) and repeated
consecutive characters.
Use Dictionary and Allow
Consecutive Characters
are disabled by default.
2.2.1.2 Login, Session and Lockout Behaviors
You can configure the Mesh Point to display details of the last
log on to the account to locally authenticating administrators
when they log on:
NOTE: The idle
timeout setting for
local administrator
accounts is indepen-
dent of timeout settings
for network users and
connecting devices con-
figured on the internal
authentication server
(Section 4.5.2).
Login: admin
Password:
Last logged in at Wed Jul 16 00:54:03 2008
Last logged in from address 10.1.1.1
Last logged in from console interface
The Display previous login feature is disabled by default.
By default, administrative accounts time out after ten minutes
of inactivity. You can turn the feature off by specifying
0 (zero)
for
UI Session Idle Timeout , or reconfigure the setting, in
minutes, up to
60 . UI Failed Attempt Time Holddown