30-10
Catalyst 4500 Series, Catalyst 2948G, Catalyst 2980G Switches Software Configuration Guide
—
Release 8.1
78-15486-01
Chapter 30 Configuring Switch Access Using AAA
Configuring Authentication
Setting Authentication Login Attempts on the Switch
To set authentication login attempts on the switch, perform this task in privileged mode:
This example shows how to set the authentication login attempts to 5, set the lockout time for both
console and Telnet connections to 50 seconds, and verify the configuration:
Console> (enable) set authentication login attempt 5
Login authentication attempts for console and telnet logins set to 5.
Console> (enable) set authentication login lockout 50
Login lockout time for console and telnet logins set to 50.
Console> (enable) show authentication
Login Authentication: Console Session Telnet Session Http Session
--------------------- ---------------- ---------------- ----------------
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(primary) enabled(primary) enabled(primary)
attempt limit 5 5 -
lockout timeout (sec) 50 50 -
Enable Authentication: Console Session Telnet Session Http Session
---------------------- ----------------- ---------------- ----------------
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(primary) enabled(primary) enabled(primary)
attempt limit 3 3 -
lockout timeout (sec) disabled disabled -
Console> (enable)
Task
Command
Step 1
Set authentication login attempts on the switch. Use the
console or telnet keywords if you want to enable local
authentication only for the console port or for Telnet
connection attempts.
set authentication login attempt {count}
[console | telnet]
Step 2
Enable login lockout time on the switch. Use the console
or telnet keywords if you want to enable local
authentication only for the console port or for Telnet
connection attempts.
set authentication login lockout {time}
[console | telnet]
Step 3
Verify the local authentication configuration.
show authentication
