Configure password policies

This section details on how to configure the password policies.

The minimum password strength and configurable attributes are recommended that includes minimum length, character sets, with the number of retries when logging in. This record details on how long an account can be locked out when the maximum number of login failures is observed.

An example password policy configuration:

device(config)# password-attributes min-length 8
device(config)# password-attributes max-retry 4 
device(config)# password-attributes max-lockout-duration 5000
device(config)# password-attributes character-restriction upper 1 
device(config)# password-attributes character-restriction lower 2 
device(config)# password-attributes character-restriction numeric 1 
device(config)# password-attributes character-restriction special-char 1

The default password encryption policy is Encryption Level 10, which utilizes salted SHA512 for password storage.

Refer to the Extreme SLX-OS Security Configuration Guide, 20.3.3, topic Password Policies for further details.