User Lockout-Window - Alcatel-Lucent OmniSwitch 6850-48 Cli Reference Manual

AAA Commands

user lockout-window

Configures a moving period of time (observation window) during which failed login attempts are counted
to determine if the number of failed attempts has exceeded the number of allowed attempts. The number
of failed login attempts is decremented by the number of failed attempts that age beyond the observation
window time period.
user lockout-window minutes
Syntax Definitions
minutes
Defaults
parameter
minutes
Platforms Supported
OmniSwitch 6400, 6850,6850E, 6855, 9000E
Usage Guidelines
•
This command is only available to the admin user because the admin user account is the only account
protected from any type of lockout attempt.
•
Specify 0 with this command to disable the observation window function. This means that failed login
attempts will never age out; the number of failed attempts is never decremented.
•
Do not configure an observation window time period that is greater than the lockout duration time
period.
•
If the number of failed login attempts exceeds the number of failed attempts allowed before the obser-
vation window time expires, then the user account is locked out of the switch.
•
The observation window time period is a global lockout setting that is applied to all passwords config-
ured on the switch.
•
Lockout settings are saved automatically; that is, these settings do not require the
configuration snapshot
Examples
-> user lockout-window 500
-> user lockout-window 0
Release History
Release 6.3.1; command was introduced.
OmniSwitch CLI Reference Guide
The number of minutes the observation window remains active. The
range is 0 to 99999.
default
0
command to save user settings over a reboot.
June 2012
write memory or
page 36-65