近几年出厂的华为路由器可能都有一个用户安全策略功能,例如在NE40E路由器【Version 5.160 (NE40E&80E V600R007C00SPC600)】上默认开启,而且开启时,在配置中看不到任何信息,只有当关闭该功能时,配置中才能看到一行信息,如下
undo user-security-policy enable
关闭该功能还有安全提示,如下
[NE40E]undo user-security-policy enable
Warning: The current operation may reduce the degree of account security. It is strongly recommended to keep this enabled.
[NE40E]
启用该功能会更安全,当也带来一些不便,包括:
- 要求密码为复杂密码,否则每次登陆会提示修改密码
- 刚创建的帐号,第一次登陆也会提示修改密码
- 创建帐号时,用户名长度有限制,即长度不能少于6位,这一点尤为严格
[NE40E-aaa]local-user ?
STRING<6-253> User name, the length of user name plus domain (with @) cannot
exceed 253 characters
[NE40E-aaa]quit
[NE40E]undo user-security-policy enable
Warning: The current operation may reduce the degree of account security. It is strongly recommended to keep this enabled.
[NE40E]aaa
[NE40E-aaa]local-user ?
STRING<1-253> User name, the length of user name plus domain (with @) cannot
exceed 253 characters
[NE40E-aaa]
所以当需要创建一个帐号,帐号名长度少于6时,可以这么操作,
- 先关闭用户安全策略功能
- 创建帐号
- 再开启用户安全策略功能。
网友评论