Configuring Password Control; Overview; Password Setting - HP FlexNetwork 10500 Series Security Configuration Manual

Configuring password control

Overview

Password control allows you to implement the following features:
•
Manage login and super password setup, expirations, and updates for device management
users.
•
Control user login status based on predefined policies.
Local users are divided into two types: device management users and network access users. This
feature applies only to device management users. For more information about local users, see
"Configuring

Password setting

Minimum password length
You can define the minimum length of user passwords. If a user enters a password that is shorter
than the minimum length, the system rejects the password.
Password composition policy
A password can be a combination of characters from the following types:
•
Uppercase letters A to Z.
•
Lowercase letters a to z.
•
Digits 0 to 9.
•
Special characters. For information about special characters, see the password-control
composition command in Security Command Reference.
Depending on the system's security requirements, you can set the minimum number of character
types a password must contain and the minimum number of characters for each type, as shown
in Table 16.
Table 16 Password composition policy
Password combination
level
Level 1
Level 2
Level 3
Level 4
In non-FIPS mode, all the combination levels are available for a password. In FIPS mode, only the
level 4 combination is available for a password.
When a user sets or changes a password, the system checks if the password meets the combination
requirement. If not, the operation fails.
Password complexity checking policy
A less complicated password such as a password containing the username or repeated characters is
more likely to be cracked. For higher security, you can configure a password complexity checking
policy to ensure that all user passwords are relatively complicated. With such a policy configured,
AAA."
Minimum number of
character types
One
Two
Three
Four
Minimum number of characters
for each type
One
One
One
One
213