CHAPTER 2: Administration Mode Commands
28
WatchGuard Vclass 5.1
account command
WG#admin<ENTER>
WG(admin)#account
-login_limit
-login_limit <admin|user> <0-10>
-status
-unlock <name>|all
-all
Effect
Allows you to view, set, and clear failed login attempt lim-
its. Login limits provide a further level of security, and
eliminate susceptibility to a “brute force” password hacks.
The account management feature is available in all three
operation modes (normal, FIPS, and CC).
The CLI allows only the root superadmin “admin” to log
in, while rejecting all other accounts, including user-
defined superamin accounts. If you set the
login_limit
feature on the root superadmin user, it is possible for the
superadmin to be locked out of the system.
To work around this possible problem:
1
Create another superadmin account in addition to the
root superadmin “admin” account, using Vcontroller,
before
you set the
login_limit
for the root
superadmin account.
If the root superadmin “admin” is locked out because of
exceeded login failures, you can use this separate, non-root-level
superadmin account to login to Vcontroller with full
administration privileges.
2
In a text editor, create and save an ASCII text file with
the following two lines:
admin
account -unlock admin
3
In Vcontroller, click
Diagnostics/CLI
and select the CLI
tab.
This feature allows you to select a text file that contains CLI
commands.
