show aaa authentication password

Prev Next

This command displays the current settings used to enforce password security. For more information, see the aaa authentication password commands and the "Authentication" chapter of your System Administration Guide or Administration Guide.

Syntax

show aaa authentication password

Parameters

None

Example

The following example shows password validation rules that require that at least one uppercase character, one numeral, and two special characters be included in a password; that a character can be repeated consecutively one time, and that a password must be changed six times before it can be used again. It also specifies that the password must be different from the username, that non-admin users must enter their current passwords to change their passwords, and that the LCD password must be at least eight characters.

Password change rules require new users to change their passwords after the first login, require all other passwords to be changed every 90 days, and specify that users should be warned 15 days before their passwords expire.

Note

Default values for all other settings are shown.

hostname # show aaa authentication password
Local password requirements:

Minimum length:                    8
Maximum length:                    32
Maximum character repeats:         2
Minimum lower case characters:     0
Minimum upper case characters:     1
Minimum special characters:        2
Minimum numeric characters:        1
Recent passwords to check against: 6
Allowed to match userid:           no

Require current password on change:  yes
 (non-admin users only)

Allow set of encrypted password:     yes
 (admin users only)

Require password change on local accounts: 

  Require password change for new account:      yes
  Maximum password age before change required:  90
  Warn user before password expires:            15 days ahead

LCD password requirements:

  Minimum length:                    8

User role

Admin, Analyst, Monitor, or Operator

Supported appliances

Central Management System: Release 7.1.0. Some output settings introduced in Release 7.5.0.

Email Security — Server: Release 7.1.0. Some output settings introduced in Release 7.6.0.

Endpoint Security (HX): Release 2.5.

Network Security: Release 7.1.0. Some output settings introduced in Release 7.5.0.