User Password Requirements; Guidelines And Limitations For User Accounts - Cisco Nexus 5600 Series Configuration Manual

Configuring User Accounts and RBAC

User Password Requirements

Cisco Nexus device passwords are case sensitive and can contain alphanumeric characters only. Special
characters, such as the dollar sign ($) or the percent sign (%), are not allowed.
Note Starting from Cisco NX-OS Release 7.2(0)N1(1), special characters, such as the dollar sign ($) or the
percent sign (%), can be used in Cisco Nexus device passwords.
If a password is trivial (such as a short, easy-to-decipher password), the Cisco Nexus device rejects the
password. Be sure to configure a strong password for each user account. A strong password has the following
characteristics:
• At least eight characters long
• Does not contain many consecutive characters (such as "abcd")
• Does not contain many repeating characters (such as "aaabbb")
• Does not contain dictionary words
• Does not contain proper names
• Contains both uppercase and lowercase characters
• Contains numbers
The following are examples of strong passwords:
• If2CoM18
• 2009AsdfLkj30
• Cb1955S21
Note For security reasons, user passwords do not display in the configuration files.

Guidelines and Limitations for User Accounts

User accounts have the following guidelines and limitations when configuring user accounts and RBAC:
• Up to 256 rules can be added to a user role.
• A maximum of 64 user roles can be assigned to a user account.
• You can assign a user role to more that one user account.
• Predefined roles such as network-admin, network-operator, and san-admin are not editable.
• Add, delete, and editing of rules is not supported for the SAN admin user role.
• The interface, VLAN, and/or VSAN scope cannot be changed for the SAN admin user role.
OL-31641-01
Cisco Nexus 5600 Series NX-OS System Management Configuration Guide, Release 7.x
User Password Requirements
75