How to disable password expiration on CE series switches

67

On CE series switches, run the local-user user-name password expire days command in the AAA view to set the password expiration time. Run the undo local-user user-name password expire command to restore the default password expiration time.
By default, user passwords never expire.
If the value of days is 0, the user password never expires.

Other related questions:
How to disable password expiration on CE series switches
On CE series switches, run the local-user user-name password expire days command in the AAA view to set the password expiration time. Run the undo local-user user-name password expire command to restore the default password expiration time. By default, user passwords never expire. If the value of days is 0, the user password never expires.

How to disable the initial password change prompt on a CE series switch
By default, the security policy function is enabled for local accounts on CE series switches to ensure security. Therefore, you will be asked to change the password at the first login.

If the initial password change prompt function is enabled for the next login on a switch, you will be also asked to change the password after the next login.

To disable a switch from asking you to change the initial password, run the following commands:
<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] undo local-user policy security-enhance  //Disable the security policy function for local accounts.                            
[*HUAWEI-aaa] undo local-user policy password change   //If the initial password change prompt function is enabled for the next login, disable it.     
[*HUAWEI-aaa] commit

How to disable the password complexity check function for an SNMP community name on a CE series switch
Run the snmp-agent community complexity-check disable command in the system view to disable complexity check of community names. In this case, you can modify the minimum length of an SNMP community name. If the configured community name does not meet complexity requirements, the system is prone to attacks from malicious users, affecting system security. Therefore, disabling complexity check of community names is not recommended.

How to change the password to a history password on a CE series switch
By default, the security policy function is enabled for local accounts on CE series switches to ensure security. The new password cannot be the same as any of the last 10 history passwords.

If the password complexity check function is configured, the new password cannot be the same as any of the last 10 history passwords.

To use a history password, run the following commands:
<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] undo local-user policy security-enhance //Disable the security policy function for local accounts.  
[*HUAWEI-aaa] undo local-user policy password complexity-enhance //If the password complexity check function has been enabled, disable it.                                           
[*HUAWEI-aaa] commit

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top