Cisco Firepower 4110 Preparative Procedures & Operational User Manual page 56

Cisco Preparative Procedures & Operational User Guide
Set the Maximum Number of Login Attempts
This option determines the maximum number of failed login attempts allowed before a user is locked out
of the FXOS chassis for a specified amount of time. If a user exceeds the set maximum number of login
attempts, the user will be locked out of the system. No notification will appear indicating that the user is
locked out. In this event, the user must wait the specified amount of time before attempting to log in.
•
All types of user accounts (including account type 'admin') are locked out of the system after
exceeding the maximum number of login attempts.
•
The default maximum number of unsuccessful login attempts is '3'. The default amount of time
the user is locked out of the system after exceeding the maximum number of login attemps is 30
minutes (3600 seconds).
1) From the FXOS CLI, enter the security mode:
scope system
scope security
2) Set the maximum number of unsuccessful login attempts:
set max-login-attempts
max_login
The max_login value can be any integer from 0-10.
3) Specify the amount of time (in seconds) the user should remain locked out of the system after
reaching the maximum number of login attempts:
set user-account-unlock-time
unlock_time
4) Commit the configuration:
commit_buffer
Configure the Minimum Password Length
If this option is enabled, the FXOS chassis requires users to create passwords with a specified minimum
number of characters. For example, if the min_length element in this option is set to '15', users must create
passwords using 15 characters or greater.
1) From the FXOS CLI, enter the security mode:
scope system
scope security
2) Enter the password profile security mode:
scope password-profile
3) Specify the minimum password length:
set min-password-length min_length
4) Commit the configuration:
commit-buffer
© 2016 Cisco Systems, Inc. All rights reserved.