Introduction To Password Control Configuration - 3Com 5500-SI Configuration Manual

30
Introduction to
Password Control
Configuration
Table 634 Functions provided by password control
Function Description
Password aging The password aging function has the following sub-functions:
1 Password aging time setting: Users can set the aging time for their
passwords. If a password ages out, its user must change it, otherwise the
user cannot log into the device.
2 Password change: After a password ages out, the user can change it when
logging into the device.
3 Alert before password expiration: Users can set their respective alert time.
If a user logs into the system when the password is about to age out (that
is, the remaining usable time of the password is no more than the set alert
time), the switch will alert the user to the forthcoming expiration and
prompts the user to change the password as soon as possible.
Limitation of This function is used to limit the minimum length of the passwords. A user can
minimum successfully configure a password only when the password is not shorter than
password its minimum length.
History The password configured and once used by a user is called a history (old)
password password. The switch is able to record the user history password. Users cannot
recording successfully replace their passwords with used passwords.
The history passwords are saved in a readable file in the flash memory, so they
will not be lost when the switch reboots.
As for history passwords, the secondary SRPC serves as a hot backup to the
primary SRPC, that is, the history passwords keep synchronized between
primary and secondary SRPCs
Password The switch protects the displayed password. The password is always displayed
protection and as a string containing only the asterisk (*) characters in the configuration file
encryption or on the command line.
The switch encrypts the configured passwords and save the passwords in
ciphertext mode in the configuration file.
P
ASSWORD
O
PERATIONS
The password control feature is designed to manage the following passwords:
Telnet passwords: passwords for logging into the switch through Telnet.
■
SSH passwords: passwords for logging into the switch through SSH.
■
FTP passwords: passwords for logging into the switch through FTP.
■
Super passwords: passwords used by the users who have logged into the switch
■
and are changing from a lower privilege level to a higher privilege level.
Password control provides the following functions:
C C
ONTROL ONFIGURATION
Application
Telnet and SSH passwords: all
password aging sub-functions are
applicable.
Super passwords: only the
password aging time setting and
the password change sub-functions
are applicable.
FTP passwords: only the password
aging time setting sub-function is
applicable.
Telnet, SSH, super, and FTP
passwords.
Telnet, SSH, super, and FTP
passwords.
Telnet, SSH, super, and FTP
passwords.