79Predefined user rolesnetwork-adminParameterscipher: Specifies a password in encrypted form.hash: Specifies a password encrypted by the hash algorithm.simple: Specifies a password in plaintext form. For security purposes, the password specified inplaintext form will be stored in encrypted form.string: Specifies the password string. This argument is case sensitive.• In non-FIPS mode: The encrypted form of the password is a string of 1 to 117 characters. The hashed form of the password is a string of 1 to 110 characters. The plaintext form of the password is a string of 1 to 63 characters.• In FIPS mode, the password is in plaintext form and is a string of 15 to 63 characters. The stringmust contain digits, uppercase letters, lowercase letters, and special characters (see"Password control commands").Usage guidelinesIf you do not specify any parameters, you enter the interactive mode to set a plaintext password.Only device management users support passwords set in interactive mode.In non-FIPS mode, a non-password-protected user passes authentication if the user provides thecorrect username and passes attribute checks. To enhance security, configure a password for eachlocal user.In FIPS mode, only password-protected users can pass authentication. For a device managementuser, you must set the password in interactive mode.Examples# Set the password to 123456TESTplat&! in plaintext form for device management user user1. system-view[Sysname] local-user user1 class manage[Sysname-luser-manage-user1] password simple 123456TESTplat&!# Configure the password in interactive mode for device management user test. system-view[Sysname] local-user test class manage[Sysname-luser-manage-test] passwordPassword:confirm :# Set the password to 123456TESTuser&! in plaintext form for network access user user2. system-view[Sysname] local-user user2 class network[Sysname-luser-network-user2] password simple 123456TESTuser&!Related commandsdisplay local-userphoneUse phone to specify the phone number of a local guest.Use undo phone to restore the default.
