Preventing a password from matching the username using the CLI

By default, users can select a password that is the same as their username. For stricter password security, you can prevent this by using a form of the aaa authentication password command. To remove the restriction on matching password to username, use the "no" form of the command.

For a managed appliance, you can perform this procedure on the Central Management System appliance as well as the local appliance. The procedure remains the same. However, you will need to take the additional step to locate the appliance on the Central Management System CLI. For instructions on locating an appliance on the Central Management System CLI, see the Trellix Central Management System Administration Guide.

Prerequisites

Admin access

To prevent a matching username and password:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Prevent users from using their username as a password:

hostname (config) # aaa authentication password local no-userid

Verify your change:

hostname (config) # show aaa authentication password

Save your changes:
```
hostname (config) # write memory
```

Example

See Example: configuring password validation policies.