Cisco WS-C2948G-GE-TX Configuration Manual page 457

Chapter 30 Configuring Switch Access Using AAA
Setting the Authentication Login Attempts for Privileged Mode
To set the authentication login attempts for privileged mode, perform this task in privileged mode:
Task
Step 1 Set the authentication login attempts for privileged
mode. Enter the console or telnet keywords if you want
to set the local authentication only for the console port or
for the Telnet connection attempts.
Step 2
Set the login lockout time for privileged mode. Enter the
console or telnet keywords if you want to set the local
authentication only for the console port or for the Telnet
connection attempts.
Step 3
Verify the local authentication configuration.
This example shows how to set the enable mode authentication login attempts to 5, set the enable mode
lockout time for both console and Telnet connections to 50 seconds, and verify the configuration:
Console> (enable) set authentication enable attempt 5
Enable mode authentication attempts for console and telnet logins set to 5.
Console> (enable) set authentication enable lockout 50
Enable mode lockout time for console and telnet logins set to 50.
Console> (enable) show authentication
Login Authentication:
---------------------
tacacs
radius
kerberos
local
attempt limit
lockout timeout (sec)
Enable Authentication: Console Session
---------------------- ----------------- ----------------
tacacs
radius
kerberos
local
attempt limit
lockout timeout (sec)
Console> (enable)
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2948G-GE-TX, and Catalyst 2980G Switches Software Configuration Guide—Release 8.2GLX
78-15908-01
Console Session Telnet Session
---------------- ----------------
disabled disabled
disabled disabled
disabled disabled
enabled(primary) enabled(primary)
5 5
50 50
Telnet Session
disabled disabled
disabled disabled
disabled disabled
enabled(primary) enabled(primary)
5 5
50 50
Configuring Authentication
Command
set authentication enable attempt {count}
[console | telnet]
set authentication enable lockout {time}
[console | telnet]
show authentication
Http Session
----------------
disabled
disabled
disabled
enabled(primary)
-
-
Http Session
----------------
disabled
disabled
disabled
enabled(primary)
-
-
30-11