HP 5500 Ei 5500 Si Switch Series Configuration Guide

 226 
[Device-GigabitEthernet1/0/1] undo port-security port-mode  

 227 
Configuring a user profile 
User profile overview 
A user profile provides a configuration template to save predefined configurations, such as a Quality of 
Service (QoS) policy. Different user profiles are  applicable to different application scenarios. 
The user profile supports working with 802.1X authenti cation and portal authentication. It is capable of 
restricting authenticated users behaviors. After the authentication server verifies a user, it sends the 
device the name of the user...

 228 
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Create a user profile, 
and enter its view.  user-profile
 profile-name  You can use the command to enter the view of 
an existing user profile. 
 
Applying a QoS policy 
You can apply QoS policies in user profile view
 to implement traffic management functions. 
Configuration guidelines 
•  After a user profile is created, apply a QoS policy in user profile view to implement restrictions on 
online users. The QoS policy takes...

 229 
To enable a user profile:  
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Enable a user profile. 
user-profile profile-name  enable  A user profile is disabled by 
default. 
 
 
NOTE:  
•  You can only edit or remove the configurations in a disabled user profile. 
•   Disabling a user profile logs out the users that are using the user profile.  
 
Displaying and maintaining user profiles 
 
Task Command Remarks 
Display information about all the 
created user profiles. display...

 230 
Configuring password control 
Password control overview 
Password control refers to a set of functions provided by the local authentication server to control user 
login passwords, super passwords, and user login status based on predefined policies. The rest of this 
section describes the password control functions in detail. 
1. Minimum password length 
By setting a minimum password length, you can en force users to use passwords long enough for 
system security. If a user specifies a shorter...

 231 
example, if you set the maximum number of logins with an expired password to three and the time 
period to 15 days, a user can log in three  times within 15 days after the password expires.  
6. Password history 
With this feature enabled, the system maintains ce rtain entries of passwords that a user has used. 
When a user changes the password, the system  checks the new password against the used ones. 
The new password must be different from the used  ones by at least four characters and the four...

 232 
9.
 
Password complexity checking 
A less complicated password such as a password co ntaining the username or repeated characters 
is more likely to be cracked.  For higher security, you can  configure a password complexity 
checking policy to make sure that all user pa sswords are relatively complicated. With such a 
policy configured, when a user configures a password, the system checks the complexity of the 
password. If the password is not qualified, th e system refuses the password and...

 233 
Task Remarks 
Setting global password control parameters  Optional 
Setting user group password control parameters Optional 
Setting local user password control parameters Optional 
Setting super password control parameters Optional 
Setting a local user password in interactive mode Optional 
 
Configuring password control 
Enabling password control 
To enable password control functions, you need to: 
1. Enable the password control featur e in system view. Only after the password control feature is...

 234 
Step Command Remarks 
2.  Set the password aging time.  password-control aging aging-time Optional 
90 days by default 
3.  Set the minimum password 
update interval.  password-control password 
update interval interval
 Optional 
24 hours by default 
4.
  Set the minimum password 
length.  password-control length 
length  Optional 
10 characters by default 
5.
  Configure the password 
composition policy.  password-control composition 
type-number 
policy-type 
[  type-length  type-length  ]...

 235 
Setting user group password control parameters  
Step Command Remarks 
1.  Enter system view. 
system-view  N/A 
2.  Create a user group and enter 
user group view.  user-group 
group-name   N/A 
3.  Configure the password 
aging time for the user group.  password-control aging aging-time 
Optional 
By default, the password aging 
time configured in system view is 
used. 
4.
  Configure the minimum 
password length for the user 
group.  password-control length 
length  Optional 
By default, the...