21-12
Catalyst 6000 Family Software Configuration Guide—Releases 6.3 and 6.4
78-13315-02
Chapter 21 Configuring Switch Access Using AAA
Configuring Authentication
Configuring Login Authentication
These sections describe how to configure login authentication on the switch:
•
Setting Authentication Login Attempts on the Switch, page 21-12
•
Setting Authentication Login Attempts for the Privileged Mode, page 21-13
Setting Authentication Login Attempts on the Switch
To set up login authentication on the switch, perform this task in privileged mode:
This example shows how to limit login attempts to five, set the lockout time for both console and Telnet
connections to 50 seconds, and verify the configuration:
Console> (enable)
set authentication login attempt 5
Login authentication attempts for console and telnet logins set to 5.
Console> (enable)
set authentication login lockout 50
Login lockout time for console and telnet logins set to 50.
Console> (enable)
show authentication
Login Authentication: Console Session Telnet Session Http Session
--------------------- ---------------- ---------------- ----------------
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(primary) enabled(primary) enabled(primary)
attempt limit 5 5 -
lockout timeout (sec) 50 50 -
Enable Authentication: Console Session Telnet Session Http Session
---------------------- ----------------- ---------------- ----------------
tacacs disabled disabled disabled
radius disabled disabled disabled
kerberos disabled disabled disabled
local enabled(primary) enabled(primary) enabled(primary)
attempt limit 3 3 -
lockout timeout (sec) disabled disabled -
Console> (enable)
Task
Command
Step 1
Enable login attempt limits on the switch. Enter
the
console
or
telnet
keyword if you want to
enable local authentication only for the console
port or for Telnet connection attempts.
set authentication login attempt
{
count
}
[
console
|
telnet
]
Step 2
Enable the login lockout time on the switch. Enter
the
console
or
telnet
keyword if you want to
enable local authentication only for the console
port or for Telnet connection attempts.
set authentication login lockout
{
time
}
[
console
|
telnet
]
Step 3
Verify the local authentication configuration.
show authentication
