How to configure login failure times and lock duration of local accounts on an AR router

22

By default, the account lock function of an AR router is enabled, the retry interval is five minutes, wrong password retry times are three, and account lock duration is five minutes.
The following example exemplifies how to configure login failure times and lock duration for a local account:
Set the retry interval to five minutes, wrong password retry times to 3, and account lock duration to five minutes.
[Huawei] aaa
[Huawei-aaa] local-aaa-user wrong-password retry-interval 5 retry-time 3 block-time 5
If the wrong password retry times are exceeded within the retry interval, a user is locked. Run the local-user < user-name > state active command to unlock the user.

Other related questions:
How to unlock a user on an AR router
Run the local-user user-name state active command on an AR router to unlock a user. Example: Unlock a user with user name Huawei. [Huawei] aaa [Huawei-aaa] local-user Huawei state active

How to configure the maximum user account lock duration and the maximum login attempts for web users of the U1900
In the configuration mode, run the config set user lock timeslimit 5 locktime 6 command. Then the account will be locked for 6 minutes after 5 incorrect login attempts for the web service. The timeslimit value ranges from 3 to 50. The locktime value ranges from 5 to 60.

How long can I re-log in to the web system of an AR after the password is locked
The default password unlocking time is 5 minutes.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top