Cisco Optical Network Planner Configuration Guide, Releases 26.x.x

PDF

Set password expiration for individual user

Updated: March 10, 2026

Want to summarize with AI?

Log in

Overview

Learn how to configure a specific password expiration date for an individual account or all users, manually expire passwords, and manage the password dictionary to enhance security.

This section explains how to set password expiration to help maintain user account security.

Follow these steps to set the expiration of the password set by the user.

Before you begin

Log in to the Cisco ONP web interface with Admin or Configuration_Management permission.

Procedure

1.

Click Control Panel.

The Access Control Management page appears.
2.

Select the user under the USERS tab., and click Update.

In the Update User dialog box:

  1. Click the PASSWORD EXPIRY tab.

  2. Enter values for the Lifetime, Warning and Grace fields.

  3. Click Save.

    Note
    The password expiry settings like lifetime, warning and grace time, take effect after the existing password is changed by the user.
3.

In the Success dialog box, click OK.

Set password expiration for all users

Establish password expiration settings for all user accounts to improve organization-wide security.
Setting a global password expiration policy helps maintain user account security by requiring users to change their passwords at regular intervals.

Follow these steps to set the password expiration for all users.

Before you begin

Log in to the Cisco ONP web interface with Admin or Configuration_Management permission.

Procedure

1.

Click Control Panel.

The Access Control Management page appears.
2.

Click the System Configuration tab.

  1. Enter values for the Lifetime, Warning, and Grace fields.

  2. Click Update.

    Note
    The password expiry settings such as lifetime, warning, and grace time, take effect after the user changes their existing password.

Expire the password set by an individual user

This task allows an administrator to manually expire the password of a specific user to enhance security by ensuring compromised or outdated credentials are not used.

Follow these steps to expire the password set by an individual user.

Before you begin

Log in to the Cisco ONP web interface with Admin permission.

Procedure

1.

Click Control Panel.

The Access Control Management page appears.
2.

Click the USERS tab.

  1. Select the user whose password you want to expire.

  2. Click Expire.

Manage password through dictionary

The dictionary rejects any new password that exists in the predefined list of passwords under the Content column in the DICTIONARY tab.

The system performs this password verification check against the dictionary during these events:

  • New user sign-up

  • Password change

  • Password reset using forgot password option

Use this task to verify whether the new password set by the user exists in the list of predefined passwords:

Before you begin

Log in to the Cisco ONP web interface as a user with the admin role.

Procedure

1.

Click Control Panel.

The Access Control Management page appears.
2.

Click the DICTIONARY tab.

  1. Enable the Rejection Mode toggle button to verify the password against the dictionary.

    By default, this toggle button remains disabled.

  2. Enter the password in the Enter Passphrase text box.

  3. To specify the maximum number of matching passphrases, enter the limit in the Enter Limit text box.

  4. Click Search.

    The system displays the matching passphrases.

    Note
    If you enter a limit, the system displays only that number of matching search results. If you do not enter a limit, the system displays all matching passphrases.