show system lockout

Use this command to display settings for locking out users.

Syntax

show system lockout

Parameters

None.

Defaults

None.

Mode

All command modes.

Example

This example shows how to display user lockout settings. In this case, device defaults have not been changed:

System(su)->show system lockout
Unsuccessful login attempts before lockout        : 3
Duration of lockout                               : 1 minutes
Lockout entire port upon failed logins            : disabled
Ports currently locked out due to failed logins   : none
Account access lockout duration applied to        : superusers
Period of inactivity before account lockout       : 90 days
Account access inactivity timer applied to        : non-superusers
Account assigned emergency-access from the console: admin

show system lockout Output Details provides an explanation of the command output. These settings are configured with set system lockout.

Click to expand in new window

show system lockout Output Details

Output... What it displays...
Unsuccessful login attempts Number of failed login attempts allowed before a read-write or read-only user‘s account will be disabled.
Duration of lockout Number of minutes the default admin user account will be locked out after the maximum login attempts.
Lockout entire port upon failed logins Current setting of the lockout port feature: enabled or disabled.
Ports currently locked out due to failed logins Ports or none currently locked out due to failed logins
Account access lockout duration applied to User mode the account access lockout duration is applied to.
Period of inactivity Number of days of inactivity before a non-superuser account is locked out. Zero specifies no lockout will occur for inactivity.
Account access inactivity timer applied to User mode account access inactivity timer is applied to or none.
Account assigned emergency-access from the console Name of the account assigned emergency access from the console or none.