Password Expiry Policy at catalyst Switches

[Ajit Kumar Tripathi]

Hi Team, 

We need to configure password policy for the Cisco C1000/9200/9300/9500 without AAA model.

[M02@rt37]

Hello @Ajit Kumar Tripathi,

If you are using the Cisco Catalyst C1000/9200/9300/9500 switches without AAA model, you can configure a local user/password policy directly on the switches. 

username [name] privilege [priv_level] secret/password [password]

Under line con/vty add the command "login local"

https://www.networkstraining.com/configuring-local-username-and-password-on-a-cisco-ios-router/

[Ajit Kumar Tripathi]

Hi M02@rt37 

thanks for your support, 

But we need password expiry policy. 

[MHM Cisco World]

Authentication Authorization and Accounting Configuration Guide, Cisco IOS XE Gibraltar 16.10.x - Password Strength and Management for Common Criteria [Cisco IOS XE 16] - Cisco

this guide talk about only AAA but try it for local user, i.e. config aaa with local user

[M02@rt37]

Ok @Ajit Kumar Tripathi, sorry.

I always see AAA model for that purpose.

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960l/software/15-2_7_e/configuration_guide/sec/b_1527e_security_2960l_cg/password_strength_and_management_for_common_criteria.pdf

[Ajit Kumar Tripathi]

Hi @MHM Cisco World M02@rt37 

Thanks for update

without AAA, this is not possible ? 

[MHM Cisco World]

Let make double check 

[Ajit Kumar Tripathi]

@MHM Cisco World,

Team, Please update.