Nortel Networks 2300 Switch User Manual


 
Managing User Passwords 85
Nortel WLAN—Security Switch 2300 Series Configuration Guide
For example, to enable password restrictions on the WSS, type the following command:
WSS# set authentication password-restrict enable
warning: the following users have passwords that do not have atleast 2 each of upper-case letters,
lower-case letters, numbers and special characters -
administrator
admin
user1
user2
admin2
jsmith
success: change accepted.
Setting the maximum number of login attempts
To specify the maximum number of login attempts before a user is locked out of the system, use the following
command:
set authentication max-attempts number
By default,
for Telnet or SSH sessions, a maximum of 4 failed login attempts are allowed.
for console or network sessions, an unlimited number of failed login attempts are allowed.
Specify a number between 0 – 2147483647. Specifying 0 causes the number of allowable login attempts to reset the
default values.
If a user is locked out of the system, you can restore the user access with the clear user lockout command.
See “Restoring access to a locked-out user” (page 86).
For example, to allow users a maximum of 3 attempts to log into the system, type the following command:
WSS# set authentication max-attempts 3
success: change accepted.
Specifying minimum password length
To specify the minimum allowable length for user passwords, use the following command:
set authentication minimum-password-length length
The minimum password length has to be between 0 – 32 characters. Specifying 0 removes the restriction on password
length. By default, there is no minimum length for user passwords. When this command is configured, you cannot
configure a password shorter than the specified length.
When you enable this command, WSS evaluates the passwords configured on the WSS and a list of users whose
password does not meet the minimum length restriction appears.
For example, to set the minimum length for user passwords at 7 characters, type the following command:
WSS# set authentication minimum-password-length 7
warning: the following users have passwords that are shorter than the minimum password length -