Managing Switch User Accounts Configuring Global User Lockout Settings
OmniSwitch 6250/6450 Switch Management Guide May 2012 page 9-23
Configuring the User Lockout Window
The lockout window is basically a moving observation window of time in which failed login attempts are
counted. If the number of failed login attempts exceeds the lockout threshold setting (see “Configuring the
User Lockout Threshold Number” on page 9-24) during any given observation window period of time, the
user account is locked out of the switch.
If a failed login attempt ages beyond the observation window of time, that attempt is no longer counted
towards the threshold number. For example, if the lockout window is set for 10 minutes and a failed login
attempt occurred 11 minutes ago, then that attempt has aged beyond the lockout window time and is not
counted. In addition, the failed login count is decremented when the failed attempt ages out.
By default, the lockout window is set to 0; this means that there is no observation window and failed login
attempts are not counted. The user is allowed an unlimited number of failed login attempts. To configure
the lockout window time, in minutes, use the user lockout-window command. For example:
-> user lockout-window 30
Do not configure an observation window time period that is greater than the lockout duration time period
(see “Configuring the User Lockout Duration Time” on page 9-25).
To Next Page
Loading...
