252 CHAPTER 8: AAA COMMANDS
set authentication
password-restrict
Activates password restrictions for network and administrative users.
Syntax — set authentication password-restrict {enable | disable}
enable — Enables password restrictions on the WX.
disable — Disables password restrictions on the WX.
Defaults — By default the password restrictions are disabled.
Access — Enabled.
History —Introduced in MSS 6.0.
Usage — When this command is enabled, the following password
restrictions tak
e effect:
Passwords must be a minimum of 10 characters in length, and a mix of
uppercase letters, lowercase letters, numbers, and special characters,
including at least two of each (for example, Tre%Pag32!).
A user cannot reuse any of his or her 10 previous passwords (not
applicable to
network users).
When a user changes his or her password, at least 4 characters must
be
different from the previous password.
When you enable the password restrictions, MSS evaluates the passwords
configured on the WX switch and displays a list of users whose password
does not meet the restriction on length and character types.
Examples — To enable password restrictions on the WX switch, type
the following command:
WX# set authentication password-restrict enable
warning: the following users have passwords that do not have
at least 2 each of upper-case letters, lower-case letters,
numbers and special characters -
dan
admin
user1
user2
goofball
dang
success: change accepted.