Security Audit Server Port; Security Audit Server Portassignment; Security Session Failedloginslockouttime; Security Session Inactivitytimeout - Cisco DX70 Administrator's Manual

Cisco DX70 and DX80

Introduction

Security Audit Server Port

The audit logs are sent to a syslog server. Define the port of the syslog server that the
system shall send its audit logs to. This setting is only relevant when Security Audit Server
PortAssignment is set to Manual.
Requires user role: AUDIT
Default value: 514
Value space: Integer (0..65535)
Set the audit server port.

Security Audit Server PortAssignment

The audit logs are sent to a syslog server. You can define how the port number of the
external syslog server will be assigned. This setting is only relevant when Security Audit
Logging Mode is set to External or ExternalSecure. To see which port number is used you
can check the Security Audit Server Port status. Navigate to Configuration > System status
on the web interface or; if on a command line interface, run the command xStatus Security
Audit Server Port.
Requires user role: AUDIT
Default value: Auto
Value space: Auto/Manual
Auto: Will use UDP port number 514 when the Security Audit Logging Mode is set to
External. Will use TCP port number 6514 when the Security Audit Logging Mode is set to
ExternalSecure.
Manual: Will use the port value defined in the Security Audit Server Port setting.

Security Session FailedLoginsLockoutTime

Define how long the system will lock out a user after failed login to a web or SSH session.
Restart the system for any change to this setting to take effect.
Requires user role: ADMIN
Default value: 60
Value space: Integer (0..10000)
Set the lockout time (minutes).
D15362.06 DX70 and DX80 Administrator Guide CE9.2, NOVEMBER 2017.
Configuration Peripherals Maintenance

Security Session InactivityTimeout

Define how long the system will accept inactivity from the user before he is automatically
logged out from a web, Telnet, or SSH session.
Restart the system for any change to this setting to take effect.
Requires user role: ADMIN
Default value: 0
Value space: Integer (0..10000)
Set the inactivity timeout (minutes); or select 0 when inactivity should not enforce
automatic logout.

Security Session MaxFailedLogins

Define the maximum number of failed login attempts per user for a web or SSH session. If
the user exceeded the maximum number of attempts the user will be locked out. 0, which is
the default value, means that there is no limit for failed logins.
Restart the system for any change to this setting to take effect.
Requires user role: ADMIN
Default value: 0
Value space: Integer (0..10)
Set the maximum number of failed login attempts per user.

Security Session MaxSessionsPerUser

The maximum number of simultaneous sessions per user is internally limited to 20 sessions.
0, which is the default value, means 20 sessions.
Requires user role: ADMIN
Default value: 0
Value space: Integer (0..100)
The maximum number of sessions per user. 0 means no hard limit.
www.cisco.com — Copyright © 2017 Cisco Systems, Inc. All rights reserved.
106
Administrator Guide
System settings System settings Appendices