Login Policy

The Login Policy controls concurrent system access to a specified number of users, sets the maximum number of unsuccessful login attempts, and specifies the response to login failure.

The single instance login-config configuration element defines the login policy.
  1. Click the Configuration tab, and then click Security.
  2. Click Login Config in the left-side pane.
  3. In the Add Login Config page, provide the following details:

    Table 3-6 Fields in the Add Login Config page

    Field Description
    Enable Login Banner Check the enable check box to enable the display of the Login Banner.

    The default option is Enabled. For more information on the Login Banner, see Login Banner.

    Concurrent Session Limit Specify the maximum number of simultaneous connections allowed per username. Valid values are integers within the range of 1 through 10, with a default value of 2 (simultaneous connections). Retain the default value, or specify a new connection limit.
    Max Login Attempts Specify the number of consecutive unsuccessful login attempts that trigger disconnection of a console, SSH, or SFTP session. Valid values are integers within the range of 2 through 100, with a default value of 3 (sessions). Retain the default value, or specify a new threshold value.
    Login Attempt Interval Enter the idle interval in seconds imposed after an unsuccessful login attempt. Valid values are integers within the range of 4 through 60, with a default value of 4 seconds. Retain the default value, or specify a new login interval.
    Lockout Interval Add the number of seconds that logins from an interface are not allowed after the max-login-attempts threshold has been reached. Valid values are integers within the range of 15 through 300. The default value is 60 seconds.
    Send Alarm enables the generation and transmission of alarms in the event of an interface lockout Allowable values are enabled (the default) or disabled. Retain the default value, or select disabled to squelch alarm generation.
  4. Click OK.