交换机安全配置命令

华为

1、console口配置为默认账号密码(huawei/Huawei@123)

[Huawei]user-interface console 0

[Huawei-ui-console0]authentication-mode aaa

[Huawei]aaa

[Huawei-aaa]local-user huawei password cipher Huawei@123 state active idle-timeout 10 privile ge level 15

[Huawei-aaa]local-user huawei service-type terminal ssh web

2、配置远程管理用户(chenxl/Qpws2023@!)

[HUAWEI] set password min-length 10 

[HUAWEI-aaa]user-password complexity-check //密码复杂度检查

[Huawei-aaa]local-user chenxl password cipher Qpws2023@! state active idle-timeout 10 privilege level 15 //创建用户chenxl，密码Qpws2023@!,登录超时为10分钟，优先级为15

[Huawei-aaa]local-user chenxl service-type terminal ssh web

<HUAWEI>compare configuration  //对比当前配置和下次启动配置是否相同

<HUAWEI>dis clock  检查时间是否准确

华三

password-control enable

password-control length 8

password-control composition type-number 3 type-length 1

password-control login-attempt 10 exceed lock-time 5

password-control super composition type-number 3