Enforce password length

[eddie.sardinha]

Hi All, 

What is the correct way to enforce password length on Cisco WS-C3850?  I found a document that specifies the AAA common criteria security policy but then does it need to be tied to a specific user or can we turn it on globally?

Thanks, 

[balaji.bandi]

Find good cisco document -  Cisco Guide to Harden Cisco IOS Devices

https://www.cisco.com/c/en/us/support/docs/ip/access-lists/13608-21.html

[luis_cordova]

Hi @eddie.sardinha,

I think you're referring to this document:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-sy/sec-usr-aaa-15-sy-book/sec-aaa-comm-criteria-pwd.html

Apparently, for the switches you must follow this guide and apply the policy per user.

Regards

[eddie.sardinha]

Yes thanks I am referring to that document.  Would that be the correct way to set up the password policy for switches and routers?

[Georg Pauwen]

Hello,

what do you need to limit, max or min length ? I am not sure if the global command

'security passwords min-length x'

is available on the 3850...

[eddie.sardinha]

I need min password length, that command did work on an ISR 4331 but not on a switch so that did enforce it on the router globally?

[balaji.bandi]

what model of switches and what IOS code they are ?

[eddie.sardinha]

We have a mix in our environment, catalyst 9400, 3850's code is at least v15.