Password-Control Login Idle-Time - HPE FlexNetwork HSR6800 Security Command Reference

Views
System view, user group view, local user view
Default command level
2: System level
Parameters
length: Specifies the minimum password length in characters. The value range for this argument is 4
to 32 in non-FIPS mode, and 8 to 32 in FIPS mode.
Usage guidelines
The setting in system view has global significance and applies to all user groups. The setting in user
group view applies to all local users in the user group. The setting in local user view applies only to
the local user.
A minimum password length setting with a smaller application range has higher priority. The system
prefers to use the minimum password length in local user view for a local user. If no minimum
password length is configured for the local user, the system uses the minimum password length for
the user group. If no minimum password length is configured for the user group, the system uses the
global minimum password length.
When global password control is enabled but the minimum password length restriction function is
disabled, the following rules apply:
•
In non-FIPS mode, the minimum password length is four characters, and the password must
have at least four different characters.
•
In FIPS mode, the minimum password length is eight characters, and the password must have
at least four different characters.
Examples
# Set the global minimum password length to 9 characters.
<Sysname> system-view
[Sysname] password-control length 9
# Set the minimum password length to 9 characters for user group test.
[Sysname] user-group test
[Sysname-ugroup-test] password-control length 9
[Sysname-ugroup-test] quit
# Set the minimum password length to 9 characters for local user abc.
[Sysname] local-user abc
[Sysname-luser-abc] password-control length 9
Related commands
•
display password-control
•
local-user
•
user-group

password-control login idle-time

Use password-control login idle-time to set the maximum account idle time. If a user account is
idle for this period of time, you can no longer use this account to log in to the device.
Use undo password-control login idle-time to restore the default.
Syntax
password-control login idle-time idle-time
204