Generated Password Policy versus User Set Password Policy

[pethomas]

Hi Guys

Could be missing the obvious, but is it possible to restrict which characters are used in Auto-generated guest password (eg exclude i and l to reduce clients confusing characters), without restricting the passwords users select?

Ta

Peter

[Jason Kunst · Accepted solution]

That's how the feature works, it's for generated passwords from the system

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_01110.html#concept_FF8145104F0742298F870657F5A5CD57

You can define a password policy for all Guest portals. A Guest password policy determines how the password is generated for all guest accounts. A password can be a mixture of alphabetic, numeric, or special characters. You can also set the number of days after which guest passwords will expire, requiring guests to reset their passwords.

[pethomas]

Thanks for the quick reply Jason

The bit that had me slightly confused was the following paragraph from that link:

/*

Specify the characters from each character set that can be used by guests to create passwords. Choose one of the following options under Allowed Characters and Minimums to specify the password policy for guests:

• Use all the characters from each character set.
• To prevent the use of certain characters, choose Custom from the drop-down menu, and delete these characters from the predefined and complete sets.

*/

That reads like the Guest Password Policy also impacts what characters guests can use - or am I just reading too much into it, or are the policies/rulesets separate?