Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 1866 / 2354

user lockout-threshold AAA Commands
page 28-36 OmniSwitch CLI Reference Guide March 2011
user lockout-threshold
Configures the number of failed password login attempts allowed during a certain period of time (observa-
tion window). If the number of failed attempts exceeds the lockout threshold number before the observa-
tion window period expires, the user account is locked out.
user lockout-threshold number
Syntax Definitions
number The number of failed login attempts allowed. The range is 0 to 999.
Defaults
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
This command is only available to the admin user because the admin user account is the only account
protected from any type of lockout attempt.
•
If the lockout threshold is set to zero (the default), there is no limit to the number of failed login
attempts allowed.
•
A user account remains locked out for the length of the lockout duration time period; at the end of this
time, the account is automatically unlocked.
•
If the lockout duration time period is set to zero, only the admin user or a user with read/write AAA
privileges can unlock a locked user account. An account is unlocked by changing the user account
password or with the
user lockout unlock command.
•
The lockout threshold time period is a global lockout setting that is applied to all passwords configured
on the switch.
•
Lockout settings are saved automatically ; that is, these settings do not require the issu slot , reload slot ,
or configuration snapshot command to save user settings over a reboot.
Examples
-> user lockout-threshold 3
-> user lockout-threshold 0
Release History
Release 7.1.1; command was introduced.
parameter default
number 0