Configuring Password Character Requirements; Configuring Password Expiration; Default Password Expiration - Alcatel-Lucent OmniSwitch AOS Release 6 Manual

Managing Switch User Accounts

Configuring Password Character Requirements

The character requirements specified in the global password policy determine the minimum number of
uppercase, lowercase, non-alphanumeric, and 10-base digit characters required in all passwords. These
requirements are configured using the following user password-policy commands:
Command
user password-policy min-uppercase
user password-policy min-lowercase
user password-policy min-digit
user password-policy min-nonalpha
Specifying zero with any of the these commands disables the requirement. For example, if the number of
minimum uppercase characters is set to zero (the default), then there is no requirement for a password to
contain any uppercase characters.

Configuring Password Expiration

By default, password expiration is disabled on the switch. A global default password expiration may be
specified for all users or password expiration may be set for an individual user.
Note. When the current user's password has less than one week before expiration, the switch will display
an expiration warning after login.
If a user's password expires, the user will be unable to log into the switch through any interface; the
admin user must reset the user's password. If the admin user's password expires, the admin user will
have access to the switch through the console port with the currently configured password.

Default Password Expiration

To set password expiration globally, use the
number of days; the allowable range is 1 to 150 days. For example:
-> user password-expiration 3
The default password expiration is now set to three days. All user passwords on the switch will be set or
reset with the three-day expiration. If an individual user was configured with a different expiration through
the user command, the expiration will be reset to the global value.
The expiration is based on the switch system date/time and date/time the user password-expiration
command is entered. For example, if a user is configured with a password expiration of 10 days, but the
global setting is 20 days, that user's password will expire in 10 days.
To disable the default password expiration, use the user password-expiration command with the disable
option:
-> user password-expiration disable
OmniSwitch AOS Release 6 Switch Management Guide
Configures ...
The minimum number of uppercase characters
required in all passwords.
The minimum number of lowercase characters
required in all passwords.
The minimum number of base-10 digits required
in all passwords.
The minimum number of non-alphanumeric char-
acters (symbols) required in all passwords.
user password-expiration
July 2010
Configuring Password Policy Settings
command with the desired
page 10-13