3-32
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 7.2
OL-29168-01
Chapter 3 Setting Up the Sensor
Configuring Authentication and User Parameters
9802 tester operator
sensor#
Step 4
To unlock the account of jsmith, reset the password.
sensor# configure terminal
sensor(config)# password jsmith
Enter New Login Password: ******
Re-enter New Login Password: ******
Configuring the Password Policy
As sensor administrator, you can configure how passwords are created. All user-created passwords must
conform to the policy that you set up. You can set login attempts and the size and minimum characters
requirements for a password. The minimum password length is eight characters. If you forget your
password, there are various ways to recover the password depending on your sensor platform.
Caution
If the password policy includes minimum numbers of character se ts, such as upper case or number
characters, the sum of the minimum number of required character sets cannot exceed t he minimum
password size. For example, you cannot set a minimum password size of eig ht and also require that
passwords must contain at least five lowercase and five uppercase characters.
Example
For example, you can set a policy where passwords must have at least 10 char acters and no more than
40, and must have a minimum of 2 upper case and 2 numeric characters. Once that policy is set, every
password configured for each user account must conform to this password policy.
To set up a password policy, follow these steps:
Step 1
Log in to the sensor using an account with administrator privileges.
Step 2
Enter password strength authentication submode.
sensor# configure terminal
sensor(config)# service authentication
sensor(config-aut)# password-strength
Step 3
Set the minimum number of numeric digits that must be in a password. The range is 0 to 64.
sensor(config-aut-pas)# digits-min 6
Step 4
Set the minimum number of nonalphanumeric printable characters that must be in a passwo rd. The range
is 0 to 64.
sensor(config-aut-pas)# other-min 3
Step 5
Set the minimum number of uppercase alphabet characters that must be in a password. The range is 0 to
64.
sensor(config-aut-pas)# uppercase-min 3
Step 6
Set the minimum number of lower-case alphabet characters that must be in a password.
sensor(config-aut-pas)# lowercase-min 3