Setting super password control parameters

The super password allows you to obtain a temporary user role without reconnecting to the device. For more information about passwords for user roles, see Fundamentals Configuration Guide.

To set super password control parameters:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Set the password expiration time for super passwords.

password-control super aging aging-time

The default setting is 90 days.

3. Configure the minimum length for super passwords.

password-control super length length

  • In non-FIPS mode, the default setting is 10 characters.

  • In FIPS mode, the default setting is 15 characters.

4. Configure the password composition policy for super passwords.

password-control super composition type-number type-number [ type-length type-length ]

  • In non-FIPS mode, by default, a super password must contain at least one character type and at least one character for each type.

  • In FIPS mode, by default, a super password must contain at least four character types and at least one character for each type.