lock-authentication failed-count

Function

The lock-authentication failed-count command sets the maximum number of allowed authentication failures.

The undo lock-authentication failed-count command restores the default maximum number of allowed authentication failures.

Format

lock-authentication failed-count count

undo lock-authentication failed-count

Parameters

Parameter	Description	Value
count	Specifies the maximum number of allowed authentication failures.	The value is an integer ranging from 1 to 5. The default value is 3.

Views

AAA view

Default Level

2: Configuration level

Usage Guidelines

If the lock-authentication enable command is run and the number of account-specific authentication failures reaches an upper limit configured using the lock-authentication failed-count command, a FW locks an account, and no administrator can use the locked-out account to log in to the FW within a specified period of time.

Example

# Set the maximum number of allowed authentication failures to 5.

<sysname> system-view
[sysname] aaa
[sysname-aaa] lock-authentication failed-count 5