HP Mellanox SX1018 Mellanox MLNX-OS®Command Reference Guide for SX101 - Page 144

Rev 1.6.9 aaa authentication attempts class-override aaa authentication attempts class-override {admin [no-lockout] | unknown {notrack | hash-username}} no aaa authentication attempts class-override {admin | unknown {no-track | hash-username}} Overrides the global settings for tracking and lockouts for a type of account. The no form of the command removes this override and lets the admin be handled according to the global settings. Syntax Description admin Overrides the global settings for tracking and lockouts for the admin account. This applies only to the single account with the username "admin". It does not apply to any other users with administrative privileges. no-lockout Prevents the admin user from being locked out, though the authentication failure history is still tracked (if tracking is enabled overall). unknown Overrides the global settings for tracking and lockouts for unknown accounts. The "unknown" class here contains the following categories: • Real remote usernames which simply failed authentica- tion • Mis-typed remote usernames • Passwords accidentally entered as usernames • Bogus usernames made up as part of an attack on the sys- tem hash-username Applies a hash function to the username, and stores the hashed result in lieu of the original. no-track Does not track authentication for such users (which of course also implies no-lockout). Default N/A Configuration Mode Config History 3.2.3000 Role admin Example switch (config) # aaa authentication attempts class-override admin nolockout Related Commands N/A Note Mellanox Technologies 144 Mellanox® Technologies Confidential