Hello,
For S and E series switches (except the S1700), you can run the local-aaa-user wrong-password retry-interval retry-interval retry-time retry-time block-time block-time command in the AAA view to enable the local account locking function to ensure the password security and prevent brute force cracking by malicious users. If a user enters incorrect passwords for a specified number of consecutive times within the retry interval, the account is locked and cannot be used for authentication within the lockout period.
Wait until the account is unlocked. To re-authenticate the locked user, use either of the following methods:
(1) Run the local-user user-name state active command in the AAA view to activate the user.
< HUAWEI>system-view
[HUAWEI] aaa
[HUAWEI-aaa] local-user user-name state active
(2) Run the undo local-aaa-user locked-password command in the AAA view to disable the local user locking function.
<HUAWEI>system-view
[HUAWEI] aaa [HUAWEI-aaa] local-user user-name state active
(2) Run the undo local-aaa-user locked-password command in the AAA view to disable the local user locking function.
< HUAWEI>system-view
[HUAWEI] aaa
[HUAWEI-aaa] undo local-aaa-user wrong-password
Glad to help you! Any further questions, let us know.