Configuring the strict password feature – Brocade BigIron RX Series Configuration Guide User Manual
Page 149
BigIron RX Series Configuration Guide
71
53-1002484-04
Setting up local user accounts
3
•
The last 15 passwords are stored in the CLI.
•
A password can be set to expire.
•
Passwords are masked during password creation.
•
Passwords must not share four or more concurrent characters with any other password
configured on the device.
•
Passwords that were previously used cannot be reused.
•
When an enable and a user password is created, it must have a minimum of eight characters
containing the following combinations:
•
At least two upper case characters
•
At least two lower case characters
•
At least two numeric characters
•
At least two special character
NOTE
Password minimum and combination requirements are strictly enforced.
Configuring the strict password feature
Use the enable strict-password-enforcement command to enable the password security feature.
Enter a command such as the following.
BigIron RX(config)# enable strict-password-enforcement
Syntax: [no] enable strict-password-enforcement
This feature is disabled by default.
When the command is configured, the passwords that users create for their accounts must not
share four or more concurrent characters with any other passwords configured on the device;
otherwise, the following error message is displayed.
Error - The substring
<
str> within the password has been used earlier, please
choose a different password.
Also, if the user tries to use a password that was previously configured, Local User Account
configuration will not be allowed and the following message will be displayed.
This password was used earlier for same or different user, please choose a
different password."
When you create a password, the characters you type are masked.
Example : To create a password for the enable login.
BigIron RX(config)# user sandy password TesT12$%
Syntax: [no] user <username> password <password>
Example : To assign a password for a user account.
BigIron RX(config)# username sandy password [Enter]
Enter password: ********
Syntax: [no] username <name> password
Enter a password such as TesT12$! that contains the required character combination.