HP 6125G HP 6125G & 6125G/XG Blade Switches Security Command Reference - Page 210

Default level 3: Manage level Parameters times: Specifies the maximum number of authentication attempts for SSH users, in the range of 1 to 5. Description Use ssh server authentication-retries to set the maximum number of authentication attempts for SSH users. Use undo ssh server authentication-retries to restore the default. By default, the maximum number of authentication attempts for SSH users is 3. You can set this limit to prevent malicious hacking of usernames and passwords. This configuration takes effect only for the users at next login. Authentication fails if the total number of authentication attempts (including both publickey and password authentication) exceeds the upper limit configured by the ssh server authentication-retries command. If the authentication method of SSH users is password-publickey, the server first uses publickey authentication, and then uses password authentication to authenticate SSH users. The process is regarded as one authentication attempt. Related commands: display ssh server. Examples # Set the maximum number of authentication attempts for SSH users to 4. system-view [Sysname] ssh server authentication-retries 4 ssh server authentication-timeout Syntax ssh server authentication-timeout time-out-value View undo ssh server authentication-timeout System view Default level 3: Manage level Parameters time-out-value: Specifies an authentication timeout period in seconds, in the range of 1 to 120. Description Use ssh server authentication-timeout to set the SSH user authentication timeout period on the SSH server. If a user does not finish the authentication when the timer expires, the connection is down. Use undo ssh server authentication-timeout to restore the default. By default, the authentication timeout period is 60 seconds. You can set a small value for this timer to prevent malicious occupation of TCP connections. 201