3Com 4500 PWR 26-Port Configuration Manual page 836

Operation
Create a local user or enter
local user view
Configure a password aging
time for the local user
In this section, you must note the effective range of the same commands when executed in different
views or to different types of passwords:
Global settings in system view apply to all local user passwords and super passwords.
Settings in the local user view apply to the local user password only.
Settings on the parameters of the super passwords apply to super passwords only.
The priority of these settings is as follows:
For local user passwords, the settings in local user view override those in system view unless the
former are not provided.
For super passwords, the separate settings for super password override those in system view
unless the former are not provided.
After password aging is enabled, the device will decide whether the user password ages out when a
user logging into the system is undergoing the password authentication. This has three cases:
1) The password has not expired. The user logs in before the configured alert time. In this case, the
user logs in successfully.
2) The password has not expired. The user logs in after the configured alert time. In this case, the
system alerts the user to the remaining time (in days) for the password to expire and prompts the
user to change the password.
If the user chooses to change the password and changes it successfully, the system records the
new password, restarts the password aging, and allows the user to log in at the same time.
If the user chooses not to change the password, the system allows the user to log in. If the user
chooses to change the password but fails in modification, the system logs out the user after the
maximum number of attempts is reached.
3) The password has already expired. In this case, the system alerts the user to the expiration,
requires the user to change the password, and requires the user to change the password again if
the user inputs an inappropriate password or the two input passwords are inconsistent.
Command
local-user user-name
password-control aging
aging-time
Description
—
Optional
By default, the aging time is
90 days.