134
To do… Use the command… Remarks
1. Enter system view.
system-view —
2. Set the password aging time
for super passwords.
password-control super aging
aging-time
Optional.
90 days by default.
3. Configure the minimum length
for super passwords.
password-control super length
length
Optional.
10 characters by default.
4. Configure the password
composition policy for super
passwords.
password-control super
composition type-number type-
number [ type-length type-length ]
Optional.
By default, the minimum number
of password composition types is
1, and the minimum number of
characters of a password
composition type is also 1.
Setting a local user password in interactive mode
You can set a password for a local user in interactive mode. When you do so, you must confirm the
password.
To set a password for a local user in interactive mode:
To do... Use the command… Remarks
1. Enter system view.
system-view —
2. Create a local user and enter
local user view.
local-user user-name —
3. Set the password for the local
user in interactive mode.
password Required
Displaying and maintaining password control
To do… Use the command… Remarks
Display password control
configuration information
display password-control [ super ]
[ | { begin | exclude | include }
regular-expression ]
Available in any view
Display information about users
blacklisted due to authentication
failure
display password-control blacklist
[ user-name name | ip ipv4-
address | ipv6 ipv6-address ] [ | {
begin | exclude | include }
regular-expression ]
Available in any view
Delete users from the blacklist
reset password-control blacklist [
user-name name ]
Available in user view
Clear history password records
reset password-control history-
record [ user-name name | super
[ level level ] ]
Available in user view
The reset password-control history-record command can delete the history password records of one or
all users even when the password history function is disabled.