Password Security Policy for Cisco 7606 & 7609

[Saran Komgris]

Any solutions about user expired date and password policy on 7606 and 7609?

I want to manage password criteria policy just like:

Minimum length of the password is 8
Special-case such as *, &, @
Password expires every 90 days
Prevent using the same/old password (5 times before)
Is it possible to creates the AAA security password policy and enters common criteria configuration policy mode on these devices?

Thank you.

[pieterh]

the policy you mention is enforced on the AAA server, not the Cisco 7606 & 7609 !

-> go to your AD/LDAP/other authentication server and configure the policy there

[Saran Komgris]

Could you please share the configuration guide?

Thanks!

[Saran Komgris]

How to point this setting to AD or specific device?

[pieterh]

you make the connection with AD on the "external Identity sources" tab

if you have multiple external identity sources you set an order in the "Identity source sequence" tab

Managing External Identity Sources  [Cisco Identity Services Engine] - Cisco Systems

[Georg Pauwen]

Hello,

on a side note, I think the only parameter you can control in IOS is the length:

7606(config)#security passwords min-length X