The password expiry mechanism is typically managed on the AAA (Authentication, Authorization, and Accounting) server where policies regarding password expiration can be set. In a Cisco environment, this would involve configuring the appropriate settings on the AAA server to ensure that passwords expire after the specified period, in this case, 60 days. The router itself does not have a built-in mechanism to expire passwords; it relies on the AAA server for this functionality. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) training materials.
Perform this task to create a password security policy and to apply the policy to a specific user profile.
Device>enable
Device#configure terminal
Device(config)#aaa new-model
Device(config)#aaa common-criteria policy policy1
Device(config-cc-policy)#char-changes 4
Device(config-cc-policy)#max-length 20
Device(config-cc-policy)#min-length 6
Device(config-cc-policy)#numeric-count 2
Device(config-cc-policy)#special-case 2
Device(config-cc-policy)#exit
Device(config)#username user1 common-criteria-policy policy1 password password1 Device(config)#end