Controlling Management Access 231
4
View the current authentication methods and profiles.
console#show authentication methods
Login Authentication Method Lists
---------------------------------
defaultList : none
networkList : local
myList : radius local
Enable Authentication Method Lists
----------------------------------
enableList : none
Line Login Method List Enable Method List
------- ----------------- ------------------
Console defaultList enableList
Telnet myList enableList
SSH myList enableList
HTTPS :local
HTTP :local
DOT1X :
Configuring Password Lockout
To define the password lockout policy:
1
Configuring the password lockout for a user requires the following steps:
Define the local user name and password
2
Select (or configure) an authentication policy for the access method (line,
SSH, Telnet)
3
Set the password lockout policy globally.
The password lockout feature applies only to users configured in the local user
database that log on to the switch by using a specific access method. AAA
servers (including RADIUS and TACACS+ servers) implement their own
password lockout policies, so the password lockout feature does not affect
users who are authenticated by a remote server.