39-12
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 39 Configuring the Switch Access Using AAA
Configuring Authentication on the Switch
This example shows how to limit login attempts to 5, set the lockout time for both console and Telnet
connections to 50 seconds, and verify the configuration:
Console> (enable)
set authentication login attempt 5
Login authentication attempts for console and telnet logins set to 5.
Console> (enable)
set authentication login lockout 50
Login lockout time for console and telnet logins set to 50.
Console> (enable)
show authentication
Login Authentication: Console Session Telnet Session Http Session
--------------------- ---------------- ---------------- ----------------
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(primary) enabled(primary) enabled(primary)
attempt limit 5 5 -
lockout timeout (sec) 50 50 -
Enable Authentication: Console Session Telnet Session Http Session
---------------------- ----------------- ---------------- ----------------
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(primary) enabled(primary) enabled(primary)
attempt limit 3 3 -
lockout timeout (sec) disabled disabled -
Console> (enable)
Setting Authentication Login Attempts for the Privileged Mode
To set up login authentication for privileged mode, perform this task in privileged mode:
This example shows how to limit enable mode login attempts to 5, set the enable mode lockout time for
both console and Telnet connections to 50 seconds, and verify the configuration:
Console> (enable)
set authentication enable attempt 5
Enable mode authentication attempts for console and telnet logins set to 5.
Console> (enable)
set authentication enable lockout 50
Enable mode lockout time for console and telnet logins set to 50.
Task
Command
Step 1
Enable the login attempt limits for privileged
mode. Enter the
console
or
telnet
keyword if you
want to enable local authentication only for the
console port or for Telnet connection attempts.
set authentication enable attempt
{
count
}
[
console
|
telnet
]
Step 2
Enable the login lockout time for privileged
mode. Enter the
console
or
telnet
keyword if you
want to enable local authentication only for the
console port or for Telnet connection attempts.
set authentication enable lockout
{
time
}
[
console
|
telnet
]
Step 3
Verify the local authentication configuration.
show authentication
