153• The password must contain at least 12 characters.• The password must consist of at least two types of valid characters, five or more of each type.• The password aging time is 20 days.Configuration procedure# Enable the password control feature globally. system-view[Sysname] password-control enable# Prohibit the user from logging in forever after two successive login failures.[Sysname] password-control login-attempt 2 exceed lock# Set the password aging time to 30 days for all passwords.[Sysname] password-control aging 30# Set the minimum password update interval to 36 hours.[Sysname] password-control password update interval 36# Specify that a user can log in five times within 60 days after the password expires.[Sysname] password-control expired-user-login delay 60 times 5# Set the maximum account idle time to 30 days.[Sysname] password-control login idle-time 30# Refuse any password that contains the username or the reverse of the username.[Sysname] password-control complexity user-name check# Specify that no character of the password can be repeated three or more times consecutively.[Sysname] password-control complexity same-character check# Specify that all super passwords must contain at least three types of valid characters and each typecontains at least five characters.[Sysname] password-control super composition type-number 3 type-length 5# Configure a super password.[Sysname] super password level 3 simple 12345ABGFTweuix# Create a local user named test.[Sysname] local-user test# Set the service type of the user to Telnet.[Sysname-luser-test] service-type telnet# Set the minimum password length to 12 for the local user.[Sysname-luser-test] password-control length 12# Specify that the passwords of the local user must contain at least two types of valid characters and eachtype contains at least five characters.[Sysname-luser-test] password-control composition type-number 2 type-length 5# Set the password aging time to 20 days for the local user.[Sysname-luser-test] password-control aging 20# Configure the password of the local user in interactive mode.[Sysname-luser-test] passwordPassword:***********Confirm :***********Updating user(s) information, please wait........
