Minimum password length policy for switch

[vitumbiko nkhwazi]

Hello Guys.

I have several switches running on IOS XE, i was trying to set the minimum password lenth on them but i cant find the command to do that, i need help, i tried "security passwords min-length " but command is not available.

Regards.

[Giuseppe Larosa · Accepted solution]

Hello @vitumbiko nkhwazi ,

I have found

>>

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-e/sec-usr-aaa-15-e-book/sec-aaa-comm-criteria-pwd.html

and

https://www.ccexpert.us/scnd/sets-the-minimum-length-of-all-cisco-ios-passwords.html

post

show version of your swtch

Hope to help

Giuseppe

[vitumbiko nkhwazi]

@Giuseppe Larosa  does the "aaa common-criteria policy" only affect local users? what if a user is logging in using radius authentication?

[Giuseppe Larosa]

Hello @vitumbiko nkhwazi ,

>> does the "aaa common-criteria policy" only affect local users? what if a user is logging in using radius authentication?

we should look in Security command reference for IOS XE

the config guide

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/15-e/sec-usr-aaa-15-e-book/sec-aaa-comm-criteria-pwd.html

provides also a reference to two RFC:

RFC 2865	Remote Authentication Dial-in User Service
RFC 3576	Dynamic Authorization Extensions to RADIUS

but the config example looks like to apply to local users only. so only the command reference can clarify this point.

Hope to help

Giuseppe

[marce1000]

 - FYI : https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16-12/sec-usr-aaa-xe-16-12-book/sec-aaa-comm-criteria-pwd.html#GUID-E534CBDE-E6CD-4651-8CA4-DA9D6EDA2740

 M.