作者:网络之路一天 首发公众号:网络之路博客(ID:NetworkBlog)
关于密码复杂度要求
实际中有的环境对于密码的复杂度、多久修改密码有要求或者客户不想弄的这么复杂,这个时候就需要来定义密码复杂度要求了。
[CoreA]local-user admin
[CoreA-luser-manage-admin]password simple admin
The password is too short. It must contain at least 7 characters.
[CoreA-luser-manage-admin]password simple admin12345
The password cannot contain the username or reversed username.
是不是在华三设备新版本里面经常遇到这样的烦恼,密码长度太短;复杂度不符合要求;第一次登录要求修改密码等,可以参考下面的设置解决该问题。
#举例
[H3C]undo password-control enable
[H3C]undo password-control length enable
[H3C]undo password-control complexity user-name check
[H3C]undo password-control change-password first-login enable
#关闭长度限制、关闭密码策略、关闭密码不能与用户名冲突限制、关闭第一次登录要求修改密码。(当然如果有需要,可以开启自己需要的)
#查询
<H3C> display password-control
Global password control configurations:
Password control: Disabled
Password aging: Enabled (90 days)
Password length: Enabled (10 characters)
Password composition: Enabled (1 types, 1 characters per type)
Password history: Enabled (max history records:4)
Early notice on password expiration: 7 days
Maximum login attempts: 3
Action for exceeding login attempts: Lock user for 1 minutes
Minimum interval between two updates: 24 hours
User account idle time: 90 days
Logins with aged password: 3 times in 30 days
Password complexity: Disabled (username checking)
Disabled (repeated characters checking)
查看设备开启了哪些密码管理功能
作者:网络之路一天,公众号:网络之路博客(ID:NetworkBlog)。让你的网络之路不在孤单,一起学习,一起成长。
标签:control,华三,Password,复杂度,Enabled,---,密码,password From: https://blog.51cto.com/ccieh3c/8379544