Additional Password Security Requirements

Version 33.1.1 adds additional restrictions for more secure user and password combinations. These include the following:

A user name and password cannot be the same.
The same letters or numbers cannot appear in succession in the pass phrase ( no '11' or 'aa' in the passphrase).
Sequential input (logical and keyboard indexed) beyond 3 characters is prohibited. For example, 1234, abcd, qwer, zxcv.
Any password used within the last three months is prohibited.

New CLI Commands

configure account [all | name] password-policy char-repeat [permit | deny]

configure account [all | name] password-policy long-sequence [permit | deny]

configure account [all | name] password-policy username-match [permit | deny]

configure account [all | name] password-policy history [num_passwords | duration days | none]