show running-config password-attributes

Displays global password attributes.

Syntax

show running-config password-attributes character-restriction [ lower | numeric | special-char | upper ]

Parameters

admin-lockout

Displays lockout for admin role accounts.

history

Specifies the number of old passwords against which a newly configured password is to be checked.

login-notify-duration

Specifies the duration in hours for which the number of last successful attempts should be notified to administrator when logging in. Use value 0 to disable the notification.

max-retry

Displays the number of failed password logins permitted before a user is locked out. Values range from 0 through 16 attempted logins. The default value is 0.

min-length

Displays the minimum length of the password. Valid values range from 8 through 32 characters. The default is 8 characters.

repeat

Specifies the maximum number (n-1) of consecutive and repetitive characters allowed in a newly configured password.

sequence

Specifies the maximum number (n-1) of consecutive and sequential characters allowed in both forward and reverse direction in a newly configured password.

character-restriction

Displays the restriction on various types of characters.

lower: Displays the minimum number of lowercase alphabetic characters that must occur in the password. Values range from 0 through 32 characters. The default value is 0.
numeric: Displays the minimum number of numeric characters that must occur in the password. Values range from 0 through 32 characters. The default is 0.
special-char: Displays the number of punctuation characters that must occur in the password. All printable, nonalphanumeric punctuation characters, except colon (:) are allowed. Values range from 0 through 32 characters. The default value is 0.
upper: Displays the minimum number of uppercase alphabetic characters that must occur in the password. Values range from 0 through 32 characters. The default value is 0.

Modes

Privileged EXEC mode

Usage Guidelines

The attributes are not displayed when they hold default values.

Examples

The following example displays all global password attributes.

device# show running-config password-attributes
 
password-attributes max-retry 4
password-attributes character-restriction upper 1
password-attributes character-restriction lower 2
password-attributes character-restriction numeric 1
password-attributes character-restriction special-char 1
password-attributes history 3
password-attributes login-modify-duration 1
password-attributes repeat 1
password-attributes sequence 1