User's Manual

108
Local password policy configuration
To enter local authorization configuration, run command localpass WORD in global configuration mode.
(1) The password cannot be the same with the user name
non-user
(2) The history password check (The new password cannot be the same with the history password.
The history password record is 20.)
non-history
(3) Specify the components of the password (complicate the password)
element [number] [lower-letter] [upper-letter] [special-character]
(4) Specify the components of the password (complicate the password)
min-length <1-127>
(5) password validity period (the validity of the password)
validity 1d2h3m4s
The configured local authorization policy can be applied to a local policy group or directly applied to a local
account. It gives priority to some local account directly.
Localpolicygroupconfiguration
To configure local policy group, run localgroup WORD in global configuration mode:
(1) local authentication configuration: apply the configured local authentication policy to the policy
group
local authen-group WORD
(2) local authorization configuration: apply the configured local authorization policy to the policy
group
local author-group WORD
(3) local password configuration: apply the configured local password policy to the policy group
local pass-group WORD
(4) local account configuration: set the maxlinks and freeze for the policy group
local user {{maxlinks <1-255>} | { freeze WORD }}
(5) account configuration: set the account for the policy group and establish the local database
username username [[[password password | encryption-type encrypted-password] |
maxlinks number | authen-group WORD | author-group WORD | pass-group WORD |
bind-ip A.B.C.D | bind-mac H:H:H:H:H:H | bind-pool WORD | bind-port port | callback-
dialstring string | callback-line line | callback-rotary rotary | nocallback-verify |
nohangup | noescape]* | autocommand command [line]&<0-n>
The configured local policy group can be used in local authentication and authorization. Local
method is applicable to the default policy group and
localgroup word is to a local policy group.
8.5.3 Local Account Policy Example
This section provides one sample configuration using local account policy. The following example shows how