Configuring The User Lockout Window - Alcatel-Lucent OmniSwitch 6450 Management Manual

Managing Switch User Accounts

Configuring the User Lockout Window

The lockout window is basically a moving observation window of time in which failed login attempts are
counted. If the number of failed login attempts exceeds the lockout threshold setting (see
User Lockout Threshold Number" on page
user account is locked out of the switch.
If a failed login attempt ages beyond the observation window of time, that attempt is no longer counted
towards the threshold number. For example, if the lockout window is set for 10 minutes and a failed login
attempt occurred 11 minutes ago, then that attempt has aged beyond the lockout window time and is not
counted. In addition, the failed login count is decremented when the failed attempt ages out.
By default, the lockout window is set to 0; this means that there is no observation window and failed login
attempts are not counted. The user is allowed an unlimited number of failed login attempts. To configure
the lockout window time, in minutes, use the
-> user lockout-window 30
Do not configure an observation window time period that is greater than the lockout duration time period
(see "Configuring the User Lockout Duration Time" on page
OmniSwitch 6250/6450 Switch Management Guide
9-24) during any given observation window period of time, the
user lockout-window
9-25).
June 2013
Configuring Global User Lockout Settings
"Configuring the
command. For example:
page 9-23