Product and Software: This article applies to all Aruba platforms and ArubaOS 3.4.2.0 and later.
ArubaOS 3.4.2.0 introduces a new feature that allows you to configure password policy for management users. By default, the password for a management user has no requirements other than a minimum length of 6 alphanumeric or special characters. This minimum password length limitation is applicable only to newly created management users.
The existing users or the upgrade from prior builds are not affected. However, if your company enforces a best practices password policy for management users with root access to network equipment, you may want to configure a password policy that sets requirements for management user passwords.
The new Password Management Policy profile can be configured to do these things:
- Require a specified number of letters, numbers, and special characters in a management user password.
- Limit the number of repeating characters in the password.
- Set the number of failed management user login attempts that will result in the management user being locked out of the network for a period of time.
The following command sets a management password policy that requires the password to have a minimum of nine characters, including one numerical digit and one special character:
aaa password-policy mgmt
enable
password-min-digit 1
password-min-length 9
password-min-special-characters 1
Consider these special characters that are allowed and are not allowed in any management user password.
|
exclamation point: !
|
Parenthesis: ( )
|
|
underscore: _
|
apostrophe: '
|
|
at symbol: @
|
semi-colon: ;
|
|
pound sign: #
|
dash: -
|
|
dollar sign: $
|
equals sign: =
|
|
percent sign: %
|
slash: /
|
|
caret: ^
|
question mark: ?
|
|
ampersand: &
|
|
star: *
|
|
greater and less than symbols: < >
|
|
curled braces: { }
|
|
straight braces: [ ]
|
|
colon :
|
|
period: .
|
|
pipe: |
|
|
plus sign: +
|
|
tilde: ~
|
|
comma: ,
|
|
accent mark: `
|