Enabling password control

To enable password control functions, you need to:

  • Enable the password control feature in system view. Password control configurations take effect only after the password control feature is enabled globally.

  • Enable a specific password control function. The following password control functions need to be enabled individually after the password control feature is enabled globally:

  • You must enable a function for its relevant configurations to take effect.

    To enable password control:

    Step

    Command

    Remarks

    1. Enter system view.

    system-view

    N/A

    2. Enable the password control feature.

    password-control enable

    Disabled by default.

    3. Enable a password control function individually.

    password-control { aging | composition | history | length } enable

    Optional.

    All of the four password control functions are enabled by default.

    After global password control is enabled, local user passwords configured on the device are not displayed when you use the corresponding display command.

    For security purposes, the system prompts the Telnet, SSH, and terminal users to change their passwords the first time they log in to the device after the global password control is enabled. Because FTP users can only have their passwords changed by the administrator, if the administrator does not change passwords for the FTP users after the global password control is enabled, the FTP users cannot log in to the device.

    About the minimum password length:

    About password history control: