set max-login-attempts
To specify the maximum number of failed login attempts allowed, use the set max-login-attempts command.
set max-login-attempts max_attempts
Syntax Description
The maximum number of failed login attempts before the user is locked out
of the system. The value can range from 0 to 10; the default is 0.
max_attempts
Command Modes
Security mode
Command History
ModificationRelease
Command added.1.1(1)
Usage Guidelines
If any user (including admin users) exceeds this maximum number of login attempts, the user is locked out
of the system and must wait a specified amount of time before being allowed to log in again. No notification
appears indicating that the user is locked out.
Example
This example shows how to enter security mode and specify a maximum number of login attempts:
FP9300-A# scope security
FP9300-A /security # set max-login-attempts 4
FP9300-A /security* # commit-buffer
FP9300-A /security #
Related Commands
DescriptionCommand
Clears a user’s locked-out status.clear lock-status
Specifies the amount of time a user remains locked out of the system after
reaching the maximum number of login attempts.
set
user-account-unlock-time
Cisco Firepower 4100/9300 FXOS Command Reference
199
S Commands
set max-login-attempts