beautypg.com

Enhanced login lockout, Setting passwords to expire, Requirement to accept the message of the day – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 39

background image

Enhanced login lockout

The CLI provides up to three login attempts. If a user fails to login after three attempts, that user is
locked out (disabled). If desired, you can increase or decrease the number of login attempts before the
user is disabled. To do so, enter a command such as the following at the global CONFIG level of the
CLI.

device(config)#enable user disable-on-login-failure 7

Syntax: enable user disable-on-login-failure 1-10

To re-enable a user that has been locked out, do one of the following:

• Reboot the Brocade device to re-enable all disabled users.
• Enable the user by entering the following command.

device(config)#username sandy enable

device(config)#user sandy enable

device#show user

Username Password Encrypt Priv Status Expire Time

==============================================================================

sandy $1$Gz...uX/$wQ44fVGtsqbKWkQknzAZ6. enabled 0 enabled 90 days

Syntax: username name enable

Setting passwords to expire

You can set a user password to expire. Once a password expires, the administrator must assign a new
password to the user. To configure a user password to expire, enter the following.

device(config)#username sandy expires 20

Syntax: username name expires days

Enter 1 - 365 for number of days. The default is 90 days.

device(config)#username sandy expires 20

device#show user

Username Password Encrypt Priv Status Expire Time

================================================================================

sandy $1$Gz...uX/$wQ44fVGtsqbKWkQknzAZ6. enabled 0 enabled 20 days

Requirement to accept the message of the day

If a message of the day (MOTD) is configured, a user will be required to press the Enter key before he
or she can login. MOTD is configured using the banner motd command.

There are no new CLI commands for this feature.

NOTE
This requirement is disabled by default, unless configured. Users are not required to press Enter after
the MOTD banner is displayed. Refer to "Requiring users to press the Enter key after the message of
the day banner" section in the FastIron Ethernet Switch Administration Guide .

Enhanced login lockout

FastIron Ethernet Switch Security Configuration Guide

39

53-1003088-03