Detections
Analytics

2.1.3 Create a password complexity policy

Information

A password policy can be used to mandate password requirements

The policy enforces recommendations when creating local users.

Solution

switch(config)#management security
switch(config-mgmt-security)#password policy PasswordPolicy
switch(config-pwd-policy-PasswordPolicy)#minimum length 8
switch(config-pwd-policy-PasswordPolicy)#minimum special 1
switch(config-pwd-policy-PasswordPolicy)#minimum upper 1
switch(config-pwd-policy-PasswordPolicy)#minimum lower 1
switch(config-pwd-policy-PasswordPolicy)#minimum digits 1
switch(config-pwd-policy-PasswordPolicy)#exit
switch(config-mgmt-security)#management accounts
switch(config-mgmt-accounts)#password policy PasswordPolicy

Impact:

Passwords that don't meet the policy will be rejected

switch(config)#username joe secret arista
% Password doesn't meet minimum digits: at least 1 required.
% Password doesn't meet minimum special characters: at least 1 are required. The special characters are (!"#$%&\\'()*+,-./:;<=>?@[^]_`{|}~)
% Password doesn't meet minimum uppercase characters: at least 1 required.
% Password too short: at least 8 characters required.
switch(config)#

See Also

https://workbench.cisecurity.org/benchmarks/25683

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(a)

Plugin: Arista

Control ID: e592b39b5072b8b19054226f79479e8b385b4bdbe9503fd0b4b83c6a3f6e4f7c