Attack-Defense Login Reauthentication-Delay - H3C MSR Series Command Reference Manual

Usage guidelines
An attack defense policy applied to the device itself detects packets destined for the device and
prevents attacks targeted at the device.
Applying an attack defense policy to the device can improve the efficiency of processing attack
packets destined for the device.
Each device can have only one attack defense policy applied. If you execute this command multiple
times, the most recent configuration takes effect.
An attack defense policy can be applied to the device itself and to multiple interfaces.
If a device and its interfaces have attack defense policies applied, a packet destined for the device is
processed as follows:
1. The policy applied to the receiving interface processes the packet.
2. If the packet is not dropped by the receiving interface, the policy applied to the device
processes the packet.
Examples
# Apply the attack defense policy atk-policy-1 to the device.
<Sysname> system-view
[Sysname] attack-defense local apply policy atk-policy-1
Related commands
attack-defense policy
display attack-defense policy

attack-defense login reauthentication-delay

Use attack-defense login reauthentication-delay to enable the login delay feature.
Use undo attack-defense login reauthentication-delay to restore the default.
Syntax
attack-defense login reauthentication-delay seconds
undo attack-defense login reauthentication-delay
Default
The login delay feature is disabled. The device does not delay accepting a login request from a user
who has failed a login attempt.
Views
System view
Predefined user roles
network-admin
Parameters
seconds: Specifies the delay period in seconds, in the range of 4 to 60.
Usage guidelines
The login delay feature delays the device to accept a login request from a user after the user fails a
login attempt. This feature can slow down login dictionary attacks.
Examples
# Enable the login delay feature and set the delay period to 5 seconds.
<Sysname> system-view
977