Alcatel-Lucent 060321-10, Rev. B, Справочное руководство CLI

Страница: 1864 / 2354

user lockout-window AAA Commands
page 28-34 OmniSwitch CLI Reference Guide March 2011
user lockout-window
Configures a moving period of time (observation window) during which failed login attempts are counted
to determine if the number of failed attempts has exceeded the number of allowed attempts. The number of
failed login attempts is decremented by the number of failed attempts that age beyond the observation
window time period.
user lockout-window minutes
Syntax Definitions
minutes The number of minutes the observation window remains active. The
range is 0 to 99999.
Defaults
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
This command is only available to the admin user because the admin user account is the only account
protected from any type of lockout attempt.
•
Specify 0 with this command to disable the observation window function. This means that failed login
attempts will never age out; the number of failed attempts is never decremented.
•
Do not configure an observation window time period that is greater than the lockout duration time
period.
•
If the number of failed login attempts exceeds the number of failed attempts allowed before the obser-
vation window time expires, then the user account is locked out of the switch.
•
The observation window time period is a global lockout setting that is applied to all passwords config-
ured on the switch.
•
Lockout settings are saved automatically .
Examples
-> user lockout-window 500
-> user lockout-window 0
Release History
Release 7.1.1; command was introduced.
parameter default
minutes 0