topic Re: Type 9 password with common-criteria policy in Network Access Control

Type 9 password with common-criteria policy

owen2 — Fri, 11 Mar 2022 05:50:08 GMT

HI Guys,

is there any way to set password type 9 that complies with the common-criteria policy on routers running ios 17

aaa common-criteria policy password-policy
min-length 8
max-length 25
numeric-count 1
upper-case 2
lower-case 2
special-case 1
char-changes 4

Re: Type 9 password with common-criteria policy

balaji.bandi — Fri, 11 Mar 2022 06:46:44 GMT

as per i know common-criteria policy guide user on what kind of password to setup a combination of mentioned rules.

Type 9 - password will be encrypted when the router store it in Run/Start Files using scrypt as the hashing algorithm.

Re: Type 9 password with common-criteria policy

owen2 — Fri, 11 Mar 2022 07:00:17 GMT

@balaji.bandi

thanks.

i found the solution.

username admin90 common-criteria-policy password-policy secret &1H&@0Nd28c7)*by72

wanted to set a password using type 9 and match the criteria.

Re: Type 9 password with common-criteria policy

balaji.bandi — Fri, 11 Mar 2022 07:51:48 GMT

Glad you able to understand and resolve the issue, appreciated your feedback and marking as a solution.

Re: Type 9 password with common-criteria policy

cisco-newbie2022 — Thu, 25 Jan 2024 15:03:43 GMT

what are the commands to set the policy? The usual command of "aaa common-criteria policy PASSWORD_POLICY" doesnt work on a 9300 switch, running 17.09.04a. There doesn't seem to be a way to set password policies such as length and complexities?