184 Configuring System InformationManaging PasswordsPassword management provides increased network security and improved password control.Passwords for SSH, Telnet, HTTP, HTTPS, and SNMP access are assigned security features,which include:• Defining minimum password lengths• Password expiration• Prevents frequent password reuse• Locks users out after failed login attemptsPassword aging starts immediately, when password management is enabled. Passwords expire based onthe user-defined time/day definition expiration. Ten days prior to password expiration, the devicedisplays a password expiration warning message.After the password has expired, users can login several additional times (number of times isconfigurable). During the remaining logins an additional warning message displays informing the userthat the password must be changed immediately. If the password is not changed, users are locked out ofthe system, and can only log in using the console. Password warnings are logged in the Syslog file.If a privilege level is redefined, the user must also be re-defined. However, the password age time expiresfrom the initial user definition.Users are notified before the password expires and that it must be changed. However, this notification isnot displayed to the Web user.Network_Default : LocalEnable Authentication Method Lists----------------------------------Console_Default : Enable NoneNetwork_Default : EnableLine Login Method List Enable Method List---- ----------------- ------------------Console Default DefaultTelnet Default DefaultSSH Default Defaulthttp : Localhttps : Localdot1x :
