beautypg.com

Verifying the configuration – H3C Technologies H3C SecPath F1000-E User Manual

Page 266

background image

256

[Sysname] password-control aging 30

# Set the minimum password update interval to 36 hours.

[Sysname] password-control password update interval 36

# Specify that a user can log in five times within 60 days after the password expires.

[Sysname] password-control expired-user-login delay 60 times 5

# Set the maximum account idle time to 30 days.

[Sysname] password-control login idle-time 30

# Refuse any password that contains the username or the reverse of the username.

[Sysname] password-control complexity user-name check

# Specify that no character can appear three or more times consecutively in a password.

[Sysname] password-control complexity same-character check

# Set the minimum number of composition types for super passwords to 3 and the minimum number of
characters of each composition type to 5.

[Sysname] password-control super composition type-number 3 type-length 5

# Configure a super password.

[Sysname] super password level 3 simple 12345ABGFTweuix

# Create a local user named test.

[Sysname] local-user test

# Set the service type of the user to Telnet.

[Sysname-luser-test] service-type telnet

# Set the minimum password length to 12 for the local user.

[Sysname-luser-test] password-control length 12

# Set the minimum number of password composition types to 2 and the minimum number of characters
of each password composition type to 5 for the local user.

[Sysname-luser-test] password-control composition type-number 2 type-length 5

# Set the password aging time to 20 days for the local user.

[Sysname-luser-test] password-control aging 20

# Configure the password of the local user in interactive mode.

[Sysname-luser-test] password

Password:***********

Confirm :***********

Updating user(s) information, please wait........

[Sysname-luser-test] quit

Verifying the configuration

# Display the global password control configuration information.

display password-control

Global password control configurations:

Password control: Enabled

Password aging: Enabled (30 days)

Password length: Enabled (10 characters)

Password composition: Enabled (1 types, 1 characters per type)

Password history: Enabled (max history record:4)

Early notice on password expiration: 7 days