R21xx-HP FlexFabric 11900 Security Command Reference

82
ipv6 ipv6-address: Specifies the IPv6 address of a user.
Usage guidelines
With no arguments provided, this command displays information about all users in the password control
blacklist.
If an FTP or virtual terminal line (VTY) user fails authentication, the system adds the user to a password
control blacklist. You can use this command to view information about these users in the blacklist.
Users accessing the system through the console interface are not blacklisted, because the system is
unable to obtain the IP addresses of these users and these users are privileged and therefore relatively
secure to the system.
Examples
# Display information about users in the password control blacklist.
<Sysname> display password-control blacklist
Username: test
IP: 192.168.44.1 Login failures: 1 Lock flag: unlock
Blacklist items matched: 1.
Table 11 Command output
Field Descri
p
tion
IP IP address of the user.
Login failed times Number of login failures.
Lock flag
Whether the user is prohibited from logging in:
• unlock—Not prohibited.
• lock—Prohibited temporarily or permanently, depending on the
password-control login-attempt command.
Blacklist items matched Number of user entries in the blacklist.
password-control { aging | composition | history | length }
enable
Use password-control { aging | composition | history | length } enable to enable the password
expiration, composition restriction, history, or minimum length restriction function.
Use undo password-control { aging | composition | history | length } enable to disable a specific
password control function.
Syntax
password-control { aging | composition | history | length } enable
undo password-control { aging | composition | history | length } enable
Default
The password control functions (aging, composition, history, and length) are all enabled.