H3C SOHO IE4300, Command Reference Manual

Page: 2163 / 3296

17
password-control login-attempt
Use
password-control login-attempt
to configure the login attempt limit. The settings
include the maximum number of consecutive login failures and the action to be taken when the
maximum number is reached.
Use
undo password-control login-attempt
to restore the default.
Syntax
password-control login-attempt login-times [ exceed { lock | lock-time
time | unlock } ]
undo password-control login-attempt
Default
The global login-attempt settings:
•
The maximum number of consecutive login failures is 3.
•
The locking period is 1 minute.
The login-attempt settings for a user group equal the global settings.
The login-attempt settings for a local user equal those for the user group to which the local user
belongs.
Views
System view
User group view
Local user view
Predefined user roles
network-admin
Parameters
login-times
: Specifies the maximum number of consecutive login failures. The value range is 2
to 10.
exceed
: Specifies an action to be taken for the user who fails to log in after making the maximum
number of attempts.
•
lock
: Disables the user account permanently.
•
lock-time time
: Disables the user account for a period of time. The user can uses this user
account when the timer expires. The value range for the
time
argument is 1 to 360 minutes.
•
unlock : Allows the user account to continue using this account to perform login attempts.
Usage guidelines
The login-attempt policy depends on the view:
•
The policy in system view has global significance and applies to all user groups.
•
The policy in user group view applies to all local users in the user group.
•
The policy in local user view applies only to the local user.
A login-attempt policy with a smaller application scope has higher priority. The system prefers to use
the login-attempt policy in local user view for a local user.
•
If no policy is configured for the local user, the system uses the policy for the user group to
which the local user belongs.
•
If no policy is configured for the user group, the system uses the global policy.