Setting super password control parameters

The super password allows you to obtain a temporary user role without reconnecting to the device. For more information, see Fundamentals Configuration Guide.

To set super password control parameters:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Set the password expiration time for super passwords.

password-control super aging aging-time

The default setting is 90 days.

3. Configure the minimum length for super passwords.

password-control super length length

  • In non-FIPS mode, the default setting is 10 characters.

  • In FIPS mode, the default setting is 15 characters.

4. Configure the password composition policy for super passwords.

password-control super composition type-number type-number [ type-length type-length ]

The following default settings apply:

  • In non-FIPS mode, a super password must contain a minimum of one character type and a minimum of one character for each type.

  • In FIPS mode, a super password must contain a minimum of four character types and a minimum of one character for each type.