526
The login failure counter for a user is reset after the user logs in successfully. If the device reboots, all
login failure counters are reset.
Examples
# Set the maximum number of successive login failures to five.
<Sysname> system-view
[Sysname] attack-defense login max-attempt 5
Related commands
attack-defense login enable
attack-defense login reauthentication-delay
Use
attack-defense login reauthentication-delay
to enable the login delay feature.
Use
undo
attack-defense login reauthentication-delay
to restore the default.
Syntax
attack-defense login reauthentication-delay
seconds
undo attack-defense login reauthentication-delay
Default
The login delay feature is disabled. The device does not delay accepting a login request from a user
who has failed a login attempt.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
seconds
: Specifies the delay period in seconds, in the range of 4 to 60.
Usage guidelines
The login delay feature delays the device to accept a login request from a user after the user fails a
login attempt. This feature can slow down login dictionary attacks.
The login delay feature is independent of the login attack prevention feature.
Examples
# Enable the login delay feature and set the delay period to 5 seconds.
<Sysname> system-view
[Sysname] attack-defense login reauthentication-delay 5
attack-defense policy
Use
attack-defense policy
to create an attack defense policy and enter its view, or enter the view of
an existing attack defense policy.
Use
undo attack-defense policy
to delete an attack defense policy.
Syntax
attack-defense policy
policy-name
Содержание FlexNetwork 7500 Series
Страница 350: ...335 Related commands display port security port security enable ...
Страница 379: ...364 Sysname system view Sysname keychain abc mode absolute Sysname keychain abc tcp kind 252 ...
Страница 519: ...504 Related commands display ssh2 algorithm ssh2 algorithm cipher ssh2 algorithm key exchange ssh2 algorithm mac ...