184 Configuring System Information
Managing Passwords
Password management provides increased network security and improved password control.
Passwordsfor SSH, Telnet, HTTP, HTTPS, and SNMP access are assigned security features,
whichinclude:
Defining minimum password lengths
Password expiration
Prevents frequent password reuse
Locks users out after failed login attempts
Password aging starts immediately, when password management is enabled. Passwords expire based on
the user-defined time/day definition expiration. Ten days prior to password expiration, the device
displays a password expiration warning message.
After the password has expired, users can login several additional times (number of times is
configurable). During the remaining logins an additional warning message displays informing the user
that the password must be changed immediately. If the password is not changed, users are locked out of
the system, and can only log in using the console. Password warnings are logged in the Syslog file.
If a privilege level is redefined, the user must also be re-defined. However, the password age time expires
from the initial user definition.
Users are notified before the password expires and that it must be changed. However, this notification is
not displayed to the Web user.
Network_Default : Local
Enable Authentication Method Lists
----------------------------------
Console_Default : Enable None
Network_Default : Enable
Line Login Method List Enable Method List
---- ----------------- ------------------
Console Default Default
Telnet Default Default
SSH Default Default
http : Local
https : Local
dot1x :