Configuring The Timeout For User Password Authentication - 3Com Switch 4500 26-Port Configuration Manual

Configuring the Timeout
for User Password
Authentication
Table 374 Configure Login Attempts Limitation and Failure Procession Mode
Operation
Display the information about
one or all users added in the
blacklist
When the maximum attempt times is exceeded, the system operates in one of the
following procession mode:
locktime: in this mode, the system inhibit the user from re-login within a
■
certain time period. After that period of time, the user is allowed to log in the
switch again. By default, this time is 120 minutes.
lock: in this mode, the system inhibit the user from re-login forever. The user is
■
allowed to log in the switch again only after the administrator removes the user
from the user blacklist.
unlock: in this mode, the system allows the user to log in again.
■
CAUTION: No inhibition operation is performed for the users who execute the
super command but fail the password attempts.
CAUTION: If a user in the blacklist changes his/her IP address, the blacklist will not
affect the user anymore when the user logs in the switch.
The system administrator can perform the following operations to manually
remove one or all user entries in the blacklist.
Table 375 Remove User Entries in Blacklist
Operation
Enter system view
Delete one specific or all user
entries in the blacklist
The authentication procedure starts from the time the local/remote server of the
switch receives the user name and ends at the time the user authentication is
completed. Whether the user is authenticated on the local server or on a remote
server is determined by the related AAA configuration. For more details, see the
secure module of this guide.
If a password authentication is not completed within the configured
authentication timeout time, the authentication fails, and the system terminates
the connection of the user and makes some logging.
Password Control Configuration
Command
display
password-control
blacklist [
username username |
ipaddress
ip-address ]
Command
system-view
reset
password-control
blacklist [
username username ]
Description
You can execute the display
command in any view
Description
Executing this command without
the username username option
will remove all the user entries in
the blacklist.
Executing this command with the
username username option will
remove the specified user entry
in the blacklist.
345