[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Limiting the Number of Login Attempts for SSH and Telnet Sessions

Limit the user four attempts when entering a password while logging in through SSH or Telnet. Set the backoff-threshold to 2, the back-off-factor to 5 seconds, and the minimum-time to 40 seconds. The user experiences a delay of 5 seconds after the second attempt to enter a correct password fails. After each subsequent failed attempt, the delay increases by 5 seconds. After the fourth and final failed attempt to enter a correct password, the user experiences an additional 10-second delay, and the connection closes after a total of 40 seconds.

[edit]
system {
login {
retry-options {
tries-before-disconnect 4;
backoff-threshold 2;
backoff-factor 5;
minimum-time 40;
}
password {
}
}
}

[Contents] [Prev] [Next] [Index] [Report an Error]