Dell PowerSwitch S4128F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 983

password-attributes max-retry lockout-period Configures a maximum number of consecutive failed login attempts and the lockout period for the user ID. Syntax Parameters password-attributes {[max-retry number] [lockout-period minutes]} • max-retry number - (Optional) Sets the maximum number of consecutive failed login attempts for a user before the user is locked out, from 0 to 16. • lockout-period minutes - (Optional) Sets the amount of time that a user ID is prevented from accessing the system after exceeding the maximum number of failed login attempts, from 0 to 43,200. Default • Maximum number of retries: 3 • Lockout period: 0 - No lockout period is configured. Failed login attempts do not lock out a user. Command Mode CONFIGURATION Usage Information To remove the configured max-retry or lockout-period settings, use the no password-attributes {max-retry | lockout-period} command. When a user is locked out due to exceeding the maximum number of failed login attempts, other users can still access the switch. Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.1.0. Also supported in SmartFabric mode starting in release 10.5.0.1. Example OS10(config)# password-attributes max-retry 5 lockout-period 30 Supported Releases 10.4.1.0 or later privilege Creates a privilege level and associates commands with it. Syntax Parameters privilege mode priv-lvl privilege-level command-string • mode - Enter the privilege mode used to access CLI modes: ○ exec - Accesses EXEC mode. ○ configure - Accesses class-map, DHCP, logging, monitor, openflow, policy-map, QOS, support-assist, telemetry, CoS, Tmap, UFD, VLT, VN, VRF, WRED, and alias modes. ○ interface - Accesses Ethernet, fibre-channel, loopback, management, null, port-group, lag, breakout, range, port-channel, and VLAN modes. ○ route-map - Accesses route-map mode. ○ router - Accesses router-bgp and router-ospf modes. ○ line - Accesses line-vty mode. • priv-lvl privilege-level - Enter the number of a privilege level, from 2 to 14. • command-string - Enter the commands supported at the privilege level. Defaults Not configured Command Mode CONFIGURATION Usage Information For users assigned to sysadmin, netadmin, and secadmin roles, you cannot configure a privilege level less than 2. If a command that you associate with a privilege level has a space, enter the command in double quotes ("). If a command does not have a space or if it has keywords separated by a hyphen, double quotes are not required. The no version of this command removes a command from a privilege level. Example OS10(config)# privilege exec priv-lvl 3 "configure terminal" OS10(config)# privilege configure priv-lvl 3 "interface ethernet" OS10(config)# privilege interface priv-lvl "ip address" Security 983