2.1.26. password-thresh

Syntax

password-thresh <0-120>

Parameter

<0-120> Specify password fail retry number. 0 means no limit.

Default[]{section-4}

Default password fail retry number is 3.

Mode

Line Configuration

Usage

Use password-thresh command to specify the password fail retry number for CLI running on console, telnet or ssh service. When user input password to login and authenticate failed, the fail retry number will increase one. After fail retry number exceed configured one, the CLI will block login for the period of silent time which configured by the command “silent-time”.

Example

This example shows how to change console fail retry number to 4, telnet fail retry number to 5 and ssh fail retry number to 6.

Switch(config)# line console
Switch(config-line)# password-thresh 4
Switch(config-line)# exit
Switch(config)# line telnet
Switch(config-line)# password-thresh 5 Switch(config-line)
exit
Switch(config)# line ssh
Switch(config-line)# password-thresh 6 Switch(config-line)
exit

This example shows how show line information.

Switch# show line
Console
------------------------------------------------------------------------
Session Timeout : 10 (minutes)
History Count : 128
Password Retry : 4

Silent Time : 0 (seconds)

Telnet

------------------------------------------------------------------------

Telnet Server : disabled
Session Timeout : 10 (minutes)
History Count : 128
Password Retry : 5
Silent Time : 0 (seconds)
SSH
------------------------------------------------------------------------
SSH Server : disabled
Session Timeout : 10 (minutes)
History Count : 128
Password Retry : 6
Silent Time : 0 (seconds)