Cisco WS-C4003 Software Guide - Page 366
Configuring Login Authentication, Setting Authentication Login Attempts on the Switch
View all Cisco WS-C4003 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 366 highlights
Configuring Authentication Chapter 27 Configuring Switch Access Using AAA Configuring Login Authentication These sections describe how to configure login authentication on the switch: • Setting Authentication Login Attempts on the Switch, page 27-12 • Setting Authentication Login Attempts for Privileged Mode, page 27-13 Setting Authentication Login Attempts on the Switch To set up login authentication on the switch, perform this task in privileged mode: Step 1 Step 2 Step 3 Task Command Enable login attempt on the switch. Use the console or telnet keywords if you want to enable local authentication only for the console port or for Telnet connection attempts. set authentication login attempt {count} [console | telnet] Enable login lockout time on the switch. Use the console or telnet keywords if you want to enable local authentication only for the console port or for Telnet connection attempts. set authentication login lockout {time} [console | telnet] Verify the local authentication configuration. show authentication This example shows how to limit login attempts to 5, set the lockout time for both console and Telnet connections to 50 seconds, and verify the configuration: Console> (enable) set authentication login attempt 5 Login authentication attempts for console and telnet logins set to 5. Console> (enable) set authentication login lockout 50 Login lockout time for console and telnet logins set to 50. Console> (enable) show authentication Login Authentication tacacs radius kerberos local attempt limit lockout timeout (sec) Console Session disabled disabled disabled enabled(primary) 5 50 Telnet Session disabled disabled disabled enabled(primary) 5 50 Http Session disabled disabled disabled enabled(primary) - Enable Authentication: Console Session Telnet Session tacacs disabled disabled radius disabled disabled kerberos disabled disabled local enabled(primary) enabled(primary) attempt limit 3 3 lockout timeout (sec) disabled disabled Console> (enable) Http Session disabled disabled disabled enabled(primary) - 27-12 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02