Dell IDRAC6, User Manual

Page: 260 / 472

260
Using the RACADM Command Line Interface
"Log In Retry Restriction (IP Blocking) Properties" lists the user-defined
parameters.
Enabling IP Blocking
The following example prevents a client IP address from establishing a session
for five minutes if that client has failed five login attempts in a one-minute
period of time.
racadm config -g cfgRacTuning -o
cfgRacTuneIpRangeEnable 1
racadm config -g cfgRacTuning -o
cfgRacTuneIpBlkFailCount 5
racadm config -g cfgRacTuning -o
cfgRacTuneIpBlkFailWindow 60
racadm config -g cfgRacTuning -o
cfgRacTuneIpBlkPenaltyTime 300
Table 15-6. Log In Retry Restriction (IP Blocking) Properties
Property Definition
cfgRacTuneIpBlkEnable Enables the IP blocking feature.
When consecutive failures
(
cfgRacTuneIpBlkFailCount ) from a single
IP address are encountered within a specific amount
of time (
cfgRacTuneIpBlkFailWindow ), all further
attempts to establish a session from that address are
rejected for a certain time span
(
cfgRacTuneIpBlkPenaltyTime) .
cfgRacTuneIpBlkFailCount Sets the number of login failures from an IP address
before the login attempts are rejected.
cfgRacTuneIpBlkFailWindow The time frame in seconds during which the failure
attempts are counted. When the failures exceed
this limit, they are dropped from the counter.
cfgRacTuneIpBlkPenaltyTime Defines the time span in seconds that login
attempts from an IP address with excessive failures
are rejected.