Setting super password control parameters

CLI commands fall into four levels: visit, monitor, system, and manage, in ascending order. Accordingly, login users fall into four levels, each corresponding to a command level. A user of a certain level can only use the commands at that level or lower levels.

To switch from a lower user level to a higher one, a user needs to enter a password for authentication. This password is called a super password. For more information on super passwords, see Fundamentals Configuration Guide.

To set super password control parameters:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Set the password aging time for super passwords.

password-control super aging aging-time

Optional.

By default, the super password aging time is the same as that of the global password .

3. Configure the minimum length for super passwords.

password-control super length length

Optional.

By default, the minimum super password length is the same as that of the global password.

4. Configure the password composition policy for super passwords.

password-control super composition type-number type-number [ type-length type-length ]

Optional.

By default, the super password composition policy is the same as that of the global password.