password expiry

[Danilo Dy]

Any Cisco documents regarding IOS local account doesn't support password expiry?

Have to ask this because a friend who's network is being audited ask me whether IOS local account support password expiry. I make a constructive reply which in summary (for the purpose of this forum) the answer is NO. However, "they" need proof from Cisco. We even asked our CCIE friend to make a statement, but even that was scrapped.

Come to think of it, I can't find any documentation from Cisco to support this. Anyone can direct me to that documentation if any?

[Lucien Avramov]

You can open a TAC case to have an official work on this.

The documentation is here:

http://www.cisco.com/en/US/docs/ios/security/configuration/guide/sec_cfg_sec_4cli_external_docbase_0900e4b1805afd68_4container_external_docbase_0900e4b1807b468c.html#wp1076691

As you will see there is no option to set password expiry on it.

Now if you don't save it on the router's startup config, then after reboot, the user will not be there anymore.

[Danilo Dy]

Hi Lucien,

Thanks for the link, but I don't see it mention why IOS doesn't support "password expiry".

The querry doesn't carry any weight to open a TAC case. For such thing as simple as this, I think Cisco should make the explanation available online.

Anyway, opening a TAC case is one thing I suggested to my friend earlier.

Regards,

Dandy