Configuring The Maximum Number Of Ssh Login Attempts - Cisco MDS 9000 Series Configuration Manual

Configuring SSH Services
generating dsa key.....
generated dsa key
Tries to set the server key pair. If a required server key pair is already configured, use the force option to
overwrite that server key pair. Deletes the old DSA key and sets the server key pair using the new bit
specification.

Configuring the Maximum Number of SSH Login Attempts

You can configure maximum number of SSH login attempts. If the user exceeds the maximum number of
permitted attempts, the session disconnects.
Note
The total number of login attempts includes attempts through public-key authentication, certificate-based
authentication, and password-based authentication. If public-key authentication is enabled, it takes priority.
If only certificate-based and password-based authentication are enabled, certificate-based authentication takes
priority. If you exceed the configured number of login attempts through all of these methods, a message
appears indicating that too many authentication failures have occurred.
Procedure
Step 1
Step 2
Step 3
Command or Action
configure terminal
Example:
switch# configure terminal
ssh login-attempts number
Example:
switch(config)# ssh login-attempts 5
(Optional) show running-config security all
Example:
switch(config)# show running-config
security all
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
Configuring the Maximum Number of SSH Login Attempts
Purpose
Enters global configuration mode.
Configures the maximum number of times that
a user can attempt to log into an SSH session.
The default maximum number of login attempts
is 3. The range is from 1 to 10.
The no form of this command
Note
removes the previous login attempts
value and sets the maximum number
of login attempts to the default value
of 3.
We recommend that you configure
the SSH login attempts value to more
than 1.
Displays the configured maximum number of
SSH login attempts.
159