TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

Example: Limiting the Number of Login Attempts for SSH and Telnet Sessions

The following example shows how to limit the user to four attempts when the user enters a password while logging in through SSH or Telnet. Set the backoff-threshold to 2, the back-off-factor to 5 seconds, and the minimum-time to 40 seconds. The user experiences a delay of 5 seconds after the second attempt to enter a correct password fails. After each subsequent failed attempt, the delay increases by 5 seconds. After the fourth and final failed attempt to enter a correct password, the user experiences an additional 10-second delay, and the connection closes after a total of 40 seconds.

The additional variables maximum-time and lockout-period are not set in this example.

[edit]

system {login {retry-options {backoff-threshold 2;backoff-factor 5;minimum-time 40;tries-before-disconnect 4;}password {}}}

Note: This sample only shows the portion off the [edit system login] hierarchy level being modified.

TechLibrary

Related Documentation

Example: Limiting the Number of Login Attempts for SSH and Telnet Sessions

Related Documentation

Published: 2013-01-23