cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1331
Views
10
Helpful
6
Replies

how to configure password policy in local username

How to configure password policy in local username not using AAA password policy.

6 Replies 6

ammahend
VIP Alumni
VIP Alumni

which product are you talking about ? ISE ?

-hope this helps-

no, 9300 series switches.

I have never done this so I had to test it out.

LAB36NETM1-C9300#show run | sec aaa
aaa new-model
aaa common-criteria policy TEST
min-length 10
max-length 127
char-changes 4

LAB36NETM1-C9300(config)#username test common-criteria-policy TEST secret cisco
% Password length is less than minimum length configure
LAB36NETM1-C9300(config)#username test common-criteria-policy TEST secret ciscocisco
LAB36NETM1-C9300(config)#

I was able to login with local account

ammahend_0-1670302325504.png

for more info : https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16-10/sec-usr-aaa-xe-16-10-book/sec-aaa-comm-criteria-pwd.html

 

-hope this helps-

This is done when we create aaa policy but i need when we create local user at that time this criteria match.

no required common-criteria-policy

just used in (Config)#username test password, like this.

Aaa new model is enabled but I am not using aaa authentication for login, I am using local account, that’s why I pasted the config. 
I don’t think there is a way to do without using common-criteria policy 

-hope this helps-

security passwords min-length <<- I know only this command it can specify the min-length of password.