Nortel 2350 用户指南

Managing User Passwords 85

Nortel WLAN—Security Switch 2300 Series Configuration Guide

For example, to enable password restrictions on the WSS, type the following command:

WSS# set authentication password-restrict enable
warning: the following users have passwords that do not have atleast 2 each of upper-case letters, 
lower-case letters, numbers and special characters -
 administrator
 admin
 user1
 user2
 admin2
 jsmith
success: change accepted.

To specify the maximum number of login attempts before a user is locked out of the system, use the following 
command:

set authentication max-attempts number

By default,

•

for Telnet or SSH sessions, a maximum of 4 failed login attempts are allowed. 

•

for console or network sessions, an unlimited number of failed login attempts are allowed.

Specify a number between 0 – 2147483647. Specifying 0 causes the number of allowable login attempts to reset the 
default values.

If a user is locked out of the system, you can restore the user access with the clear user lockout command. 
See 

For example, to allow users a maximum of 3 attempts to log into the system, type the following command:

WSS# set authentication max-attempts 3
success: change accepted.

To specify the minimum allowable length for user passwords, use the following command:

set authentication minimum-password-length length

The minimum password length has to be between 0 – 32 characters. Specifying 0 removes the restriction on password 
length. By default, there is no minimum length for user passwords. When this command is configured, you cannot 
configure a password shorter than the specified length.

When you enable this command, WSS evaluates the passwords configured on the WSS and a list of users whose 
password does not meet the minimum length restriction appears.

For example, to set the minimum length for user passwords at 7 characters, type the following command:

WSS# set authentication minimum-password-length 7
warning: the following users have passwords that are shorter than the minimum password length -