Extreme Networks ExtremeWare XOS 11.3, Manual

Page: 52 / 698

Accessing the Switch
ExtremeWare XOS 11.3 Concepts Guide
52
To age out the password after a specified time, issue the following command:
configure account [all | <name>] password-policy max-age [<num_days> | none]
You can block users from employing previously used passwords by issuing the command:
configure account [all | <name>] password-policy history [<num_passwords> | none]
By default, the system terminates a session once the user has 3 consecutive failed login attempts. The
user may then launch another session (which again would terminate after 3 consecutive failed login
attempts). To increase security, you can lock users out of the system entirely after 3 failed consecutive
login attempts. To use this feature, issue the following command:
configure account [all | <name>] password-policy lockout-on-login-failures [on |
off]
NOTE
If you are not working on SSH, you can configure the number of failed logins that trigger lockout, using the
configure cli max-failed-logins <num-of-logins>
command. (This command also sets the number of
failed logins that terminate the particular session.)
Once locked out (using the
configure account password-policy lockout-on-login-failures
command), the user’s account must be specifically re-enabled by an administrator. To re-enable a
locked-out account, issue the following command:
clear account [all | <name>] lockout
Selecting the
all
option affects the setting of all existing and future new accounts.
NOTE
The default admin account and failsafe accounts are never locked out, no matter how many consecutive failed login
attempts.
Displaying Passwords
To display the accounts and any applied password security, issue the following command:
show accounts password-policy
The following output shows a sample display from the
show accounts password-policy
command:
---------------------------------------------------------------------------
Accounts global configuration(applied to new accounts on creation)
---------------------------------------------------------------------------
Password Max. age : None
Password History limit : None
Password Min. length : None
Password Character Validation : Disabled
Accts. lockout on login failures: Disabled
Accounts locked out : No
---------------------------------------------------------------------------