Table of Contents
Advertisement
Managing Switch User Accounts
Specific User Password Expiration
To set password expiration for an individual user, use the
the desired number of days or an expiration date. For example:
-> user bert password techpubs expiration 5
This command gives user bert a password expiration of five days.
To set a specific date for password expiration, include the date in mm/dd/yyyy hh:mm format. For exam-
ple:
-> user bert password techpubs expiration 02/19/2003 13:30
This command sets the password expiration to February 19, 2003, at 1:30pm; the switch will calculate the
expiration based on the system date/time. The system date/time may be displayed through the
and
system time
commands.
Note. The expiration will be reset to the global default setting (based on the
command) if the user password is changed or the user password-expiration command is entered again.
Configuring the Password History
The password history refers to the number of old passwords for each user account that are saved by the
switch. This functionality prevents the user from using the same password each time their account pass-
word is changed. For example, if the password history is set to 10 and a new password entered by the user
matches any of the 10 passwords saved, then an error message is displayed notifying the user that the
password is not available.
By default, the password history is set to save up to 4 old passwords for each user account. To configure
the number of old passwords to save, use the
-> user password-history 2
To disable the password history function, specify 0 as the number of old passwords to save. For example:
-> user password-history 0
Note that a password is dropped from the password history when it no longer falls within the number of
passwords that are retained by the switch.
Configuring the Minimum Age for a Password
The password minimum age setting specifies the number of days during which a user is not allowed to
change their password. Note that it is necessary to configure a password minimum age value that is less
than the password expiration value.
The default minimum age is set to zero, which means that there is no minimum age requirement for a
password. To configure a minimum password age, use the
ple:
-> user password-min-age 7
This command specifies that the user is prevented from changing their password for seven days from the
time the password was created or modified.
OmniSwitch AOS Release 7 Switch Management Guide
user
command with the expiration keyword and
user password-history
command. For example:
user password-min-age
March 2011
Configuring Password Policy Settings
system date
user password-expiration
command. For exam-
page 6-13
Advertisement
Table of Contents
