OS6860(E)_AOS_8.1.1.R01_Switch_Management_Guide

Managing Switch User Accounts
Configuring Password Policy Settings
Configuring Password Character Requirements
The character requirements specified in the global password policy determine the minimum number of
uppercase, lowercase, non-alphanumeric, and 10-base digit characters required in all passwords. These
requirements are configured using the following user password-policy commands:
Command Configures ...
user password-policy min-uppercase
user password-policy min-lowercase
user password-policy min-digit
user password-policy min-nonalpha
The minimum number of uppercase characters
required in all passwords.
The minimum number of lowercase characters
required in all passwords.
The minimum number of base-10 digits required
in all passwords.
The minimum number of non-alphanumeric characters
(symbols) required in all passwords.
Specifying zero with any of the these commands disables the requirement. For example, if the number of
minimum uppercase characters is set to zero (the default), then there is no requirement for a password to
contain any uppercase characters.
Configuring Password Expiration
By default, password expiration is disabled on the switch. A global default password expiration may be
specified for all users or password expiration may be set for an individual user.
Note. When the current user’s password has less than one week before expiration, the switch will display
an expiration warning after login.
If a user’s password expires, the user will be unable to log into the switch through any interface; the
admin user must reset the user’s password. If the admin user’s password expires, the admin user will
have access to the switch through the console port with the currently configured password.
Default Password Expiration
To set password expiration globally, use the user password-expiration command with the desired
number of days; the allowable range is 1 to 150 days. For example:
-> user password-expiration 3
The default password expiration is now set to three days. All user passwords on the switch will be set or
reset with the three-day expiration. If an individual user was configured with a different expiration through
the user command, the expiration will be reset to the global value.
The expiration is based on the switch system date/time and date/time the user password-expiration
command is entered. For example, if a user is configured with a password expiration of 10 days, but the
global setting is 20 days, that user’s password will expire in 10 days.
To disable the default password expiration, use the user password-expiration command with the disable
option:
-> user password-expiration disable
OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 6-11