topic RE: Automatically expiring login credentials on extreme switches in ExtremeSwitching (EOS)

Automatically expiring login credentials on extreme switches

Neeraj_Singh — Mon, 04 Apr 2016 23:30:00 GMT

is there any way if username/password can automatically expire for specific duration. on extreme switches

RE: Automatically expiring login credentials on extreme switches

Kevin_Kim — Tue, 05 Apr 2016 00:15:00 GMT

You can set a password max age for a particular account.

# configure account "user" password-policy max-age
none No maximum age enforced for password
Maximum age of password, between 1 and 365 days

RE: Automatically expiring login credentials on extreme switches

Neeraj_Singh — Tue, 05 Apr 2016 22:52:00 GMT

this is applicable for all extreme switches ?

RE: Automatically expiring login credentials on extreme switches

Drew_C — Tue, 05 Apr 2016 22:52:00 GMT

The command Kevin shared is for all EXOS switches.

RE: Automatically expiring login credentials on extreme switches

Kevin_Kim — Tue, 05 Apr 2016 23:35:00 GMT

My apology.

I think this is not what you are looking for. More clarity here. The command previousely mentioned will expire an existing password in a specified period of time but then prompt a user to change a new password. The user will be able to continue to login with the new password.

If you want to invalidate a password, I think a timer-based UPM script would be an option.

RE: Automatically expiring login credentials on extreme switches

Drew_C — Tue, 05 Apr 2016 23:35:00 GMT

Moving to RADIUS mgmt-access is another good way to do this. If the credentials on the server-side have expired, they aren't valid on the switch until the user resets their password (at least with Active Directory).