R21xx-HP FlexFabric 11900 Security Command Reference

83
Views
System view
Predefined user roles
network-admin
Parameters
aging: Enables the password expiration function.
composition: Enables the password composition restriction function.
history: Enables the password history function.
length: Enables the minimum password length restriction function.
Usage guidelines
Before you enable a specific password control function, you must first enable the global password control
feature.
The system stops recording history passwords after you execute the undo password-control history
enable command, but it does not delete the prior records.
When global password control is enabled, but the minimum password length restriction function is
disabled, apply the following rules:
• In non-FIPS mode, the minimum password length is 4 characters, and the password must have at
least 4 different characters.
• In FIPS mode, the minimum password length is 15 characters, and the password must have at least
4 different characters.
Examples
# Enable the password control feature globally.
<Sysname> system-view
[Sysname] password-control enable
# Enable the password composition restriction function.
[Sysname] password-control composition enable
# Enable the password expiration function.
[Sysname] password-control aging enable
# Enable the minimum password length restriction function.
[Sysname] password-control length enable
# Enable the password history function.
[Sysname] password-control history enable
Related commands
• display password-control
• password-control enable
password-control aging
Use password-control aging to set the password expiration time.
Use undo password-control aging to restore the default.