Chapter 21: Access Management and Security (CLI)
Configuring the General Access Control Parameters
(CLI)
phn-3963_004v000
Page 21-398
Configuring the General Access Control Parameters
(CLI)
To avoid unauthorized login to the system, the following parameters should be set:
Inactivity Timeout
Blocking access due to login failures
Blocking unused accounts
This section includes:
Configuring the Inactivity Timeout Period (CLI)
Configuring Blocking Upon Login Failure (CLI)
Configuring Blocking of Unused Accounts (CLI)
Configuring the Inactivity Timeout Period (CLI)
A system management session automatically times out after a defined period (in minutes) with no
user activity. To configure the session timeout period, enter the following command in root view:
root> platform security protocols-control session inactivity-timeout set
<inactivity-timeout>
To display the currently configured session timeout period, enter the following command in root
view:
root> platform security protocols-control session inactivity-timeout show
Table 194 Inactivity Timeout Period CLI Parameters
Parameter
Input Type
Permitted Values
Description
inactivity-
timeout
Number
1 - 60
The session inactivity timeout
period (in minutes).
Example
The following command sets the session inactivity timeout period to 30 minutes:
root> platform security protocols-control session inactivity-timeout set
30
Configuring Blocking Upon Login Failure (CLI)
Upon a configurable number of failed login attempts, the system blocks the user from logging in
for a configurable number of minutes.