Brocade Communications Systems 6650 Enabling user password masking, Enabling user password aging

Local user accounts

This password was used earlier for same or different user, please choose a different password.

Enabling user password masking

By default, when you use the CLI to create a user password, the password displays on the console as you type it. For enhanced security, you can configure the Brocade device to mask the password characters entered at the CLI. When password masking is enabled, the CLI displays asterisks (*) on the console instead of the actual password characters entered.

The following shows the default CLI behavior when configuring a username and password.

Brocade(config)# username kelly password summertime

The following shows the CLI behavior when configuring a username and password when password-maskingis enabled.

Brocade(config)# username kelly password

Enter Password: ********

NOTE

When password masking is enabled, press the [Enter] key before entering the password.

Syntax: username name password [Enter]

For [Enter], press the Enter key. Enter the password when prompted.

If strict-password-enforcementis enabled, enter a password which contains the required character combination. Refer to “Enabling enhanced user password combination requirements” on page 18.

To enable password masking, enter the following command.

Brocade(config)# enable user password-masking

Syntax: [no] enable user password-masking

Enabling user password aging

For enhanced security, password aging enforces quarterly updates of all user passwords. After 180 days, the CLI will automatically prompt users to change their passwords when they attempt to sign on.

When password aging is enabled, the software records the system time that each user password was configured or last changed. The time displays in the output of the show running configuration command, indicated by set-time time.

Example

Brocade# show run

Current configuration:

....

username waldo password .....

username raveen set-time 2086038248

....

The password aging feature uses the SNTP server clock to record the set-time. If the network does not have an SNTP server, then set-time will appear as set-time 0 in the output of the show running configuration command.

Brocade ICX 6650 Security Configuration Guide	19
53-1002601-01