User's Manual 67. Configuration Parameters Reference
Version 6.8 823 Mediant 500L MSBR
Parameter Description
The last SSH login information is cleared when the device
is reset.
Web: Max Login Attempts
CLI: ssh-max-login-attempts
[SSHMaxLoginAttempts]
Defines the maximum SSH login attempts allowed for entering an
incorrect password by an administrator before the SSH session is
rejected.
The valid range is 1 to 3. the default is 3.
67.4.6 TAACS+ Parameters
The TACACS+ parameters are described in the table below.
Table 67-26: TACACS+ Parameters
Parameter Description
CLI: aaa authentication login
tacacs+
[TacPlusEnable]
Enables the Terminal Access Controller Access-Control System
(TACACS+) remote authentication protocol and user authentication for
CLI login.
[0] = Disabled (default)
[1] = Enabled
Note: For this parameter to take effect, a device reset is required.
CLI: tacacs-server host
<host-ip>
[TacPlusServerIP]
Defines the IP address (in dotted-decimal notation) of the TACACS+
primary authentication server.
CLI: tacacs-server host
<host-ip>
[TacPlusSecondaryServerIP]
Defines the IP address (in dotted-decimal notation) of the TACACS+
secondary authentication server.
CLI: tacacs-server port
<port-num>
[TacPlusPort]
Defines the TACACS+ authentication port (UDP) for authenticating
with the RADIUS server.
The valid value range is 1 to 15. The default is 49.
CLI: tacacs-server timeout
<seconds>
[TacPlusTimeout]
Defines the TACACS+ response timeout (in seconds). If no response
is received within this period, retransmission is required.
The valid value range is 1 to 15. The default is 5.
CLI: tacacs-server key
<password>
[TacPlusSharedSecretand]
Defines the TACACS+ shared secret between client and server.
The valid value can be a string of up to 64 characters. The default is
“msbg”.
67.4.7 IDS Parameters
The Intrusion Detection System (IDS) parameters are described in the table below.
Table 67-27: IDS Parameters
Parameter Description
Web: Intrusion Detection
System (IDS)
CLI: enable-ids
[EnableIDS]
Enables the IDS feature.
[0] Disable (default)
[1] Enable
Note: For this parameter to take effect, a device reset is required.