Beginning with JUNOS Release 8.0, you can limit the number of times a user can attempt to enter a password while logging in through SSH or Telnet. The connection is terminated if a user fails to log in after the number of attempts specified. You can also specify a delay, in seconds, before a user can try to enter a password after a failed attempt. In addition, you can specify the threshold for the number of failed attempts before the user experiences a delay in being able to enter a password again.
To specify the number of times a user can attempt to enter a password while logging in, include the retry-options statement at the [edit system login] hierarchy level:
- [edit system login]
- retry-options {
- tries-before-disconnect number;
- backoff-threshold number;
- backoff-factor seconds;
- minimum-time seconds;
- }
- password {
- }
You can configure the following options.
