Understanding and managing password policies, Password policies overview, Password strength policy – Brocade Network OS Administrator’s Guide v4.1.1 User Manual

Page 265

Advertising
background image

3. Enter user configuration mode.

switch(config-alias-config)# user john smith

4. Set the user-level alias.

switch(config-alias-config-user)# alias manager engineering

Understanding and managing password policies

Password policies overview

Password policies define and enforce a set of rules that make passwords more secure by subjecting all
new passwords to global restrictions. The password policies described in this section apply to the
switch-local user database only. Configured password policies (and all user account attribute and
password state information) are synchronized across management modules and remain unchanged
after an HA failover.

In logical chassis cluster mode, the configuration is applied to all the nodes in the cluster.

The following three subsections detail the configurable password policies.

Password strength policy

The following table lists configurable password policy parameters.

Password policy parameters

TABLE 45

Parameter

Description

character-
restriction lower

Specifies the minimum number of lowercase alphabetic characters that must occur in the
password. The maximum value must be less than or equal to the minimum length value. The
default value is zero, which means there is no restriction of lowercase characters.

character-
restriction upper

Specifies the minimum number of uppercase alphabetic characters that must occur in the
password. The maximum value must be less than or equal to the Minimum Length value. The
default value is zero, which means there is no restriction of uppercase characters.

character-
restriction numeric

Specifies the minimum number of numeric characters that must occur in the password. The
maximum value must be less than or equal to the Minimum Length value. The default value is
zero, which means there is no restriction of numeric characters.

character-
restriction special-
char

Specifies the minimum number of punctuation characters that must occur in the password. All
printable, non-alphanumeric punctuation characters except the colon (:) are allowed. The value
must be less than or equal to the Minimum Length value. The default value is zero, which
means there is no restriction of punctuation characters.

Characters added after an exclamation point are dropped. For example, if you use the
password "first!second", the password will become "first!"

Special characters, such as backslash (\) and question mark (?), are not counted as characters
in a password unless the password is specified within quotes.

min-length

Specifies the minimum length of the password. Passwords must be from 8 through 32
characters in length. The default value is 8. The total of the previous four parameters
(lowercase, uppercase, digits, and punctuation) must be less than or equal to the Minimum
Length value.

Understanding and managing password policies

Network OS Administrator’s Guide

265

53-1003225-04

Advertising