Aaa Password-Policy - Cisco NCS 5000 Series Manual

aaa password-policy

aaa password-policy
To define a AAA password security policy, use the aaa password-policy command in XR Config mode. To
remove the AAA password security policy, use the no form of this command.
aaa password-policy policy-name {min-length min-length| max-length max-length| special-char special-char|
upper-case upper-case| lower-case lower-case| numeric numeric| lifetime {years| months| days| hours|
minutes| seconds} lifetime| min-char-change min-char-change| authen-max-attempts authen-max-attempts|
lockout-time {days| hours| minutes| seconds} lockout-time}
no aaa password-policy policy-name {min-length min-length| max-length max-length| special-char
special-char| upper-case upper-case| lower-case lower-case| numeric numeric| lifetime {years| months|
days| hours| minutes| seconds} lifetime| min-char-change min-char-change| authen-max-attempts
authen-max-attempts| lockout-time {days| hours| minutes| seconds} lockout-time}
Syntax Description
policy-name
min-length
max-length
special-char
upper-case
lower-case
numeric
lifetime
min-char-change
authen-max-attempts
lockout-time
Command Default
None
System Security Command Reference for Cisco NCS 5000 Series Routers
20
Authentication, Authorization, and Accounting Commands
Specifies the name of the password, in characters.
Specifies the minimum length of the password, in integer.
Specifies the maximum length of the password, in integer.
Specifies the number of special characters allowed in the password policy, in
integer.
Specifies the number of upper case alphabets allowed in the password policy,
in integer.
Specifies the number of lower case alphabets allowed in the password policy,
in integer.
Specifies the number of numerals allowed in the password policy, in integer.
Specifies the maximum lifetime for the password, the value of which is
specified in integer, as years, months, days, hours, minutes or seconds.
Specifies the number of character change required between subsequent
passwords, in integer.
Specifies, in integer, the maximum number of authentication failure attempts
allowed for a user, in order to restrict users who authenticate with invalid login
credentials.
Specifies, in integer, the duration (in days, hours, minutes or seconds) for
which the user is locked out when he exceeds the maximum limit of
authentication failure attempts allowed.