show system login

Use this command to display user login account information.

Syntax

show system login [-verbose]

Parameters

-verbose (Optional) When specified, a verbose level of information displays for each user account.

Defaults

If -verbose is not specified, a standard level of information displays.

Mode

All command modes.

Examples

This example shows how to display login account information. In this case, device defaults are user names admin, ro, and rw and have not been changed; 911 is an administratively configured user account:

System(su)->show system login
Username        Access      State     Local  Login Access Allowed
                                      Only?  Start  End    Days
911             super-user  enabled   yes    ***access always allowed***
admin           super-user  enabled   no     ***access always allowed***
ro              read-only   enabled   no     ***access always allowed***
rw              read-write  enabled   no     ***access always allowed***
System(su)->

This example shows a verbose level of information for this system login configuration:

System(su)->show system login -verbose
Username: 911
---------
   Access                    : super-user
   State                     : enabled
   Local                     : yes
   Login start time          : any
   Login end time            : any
   Allowed login days        : any
   Simultaneous logins       : no limit
   Password aging            : using system password aging
   Password timestamp        : TUE MAY 03 07:43:53 2011
   Last login timestamp      : WED JUN 15 08:29:37 2011
   Failed logins             : 0
   Lockout started           : None
   Logins during grace period: 0
Username: admin
---------
   Access                    : super-user
   State                     : enabled
   Local                     : no
   Login start time          : any
   Login end time            : any
   Allowed login days        : any
   Simultaneous logins       : no limit
   Password aging            : using system password aging
   Password timestamp        : TUE MAY 03 06:23:46 2011
   Last login timestamp      : TUE JUN 14 09:48:39 2011
   Failed logins             : 0
   Lockout started           : None
   Logins during grace period: 0
Username: ro
---------
   Access                    : read-only
   State                     : disabled
   Local                     : no
   Login start time          : any
   Login end time            : any
   Allowed login days        : any
   Simultaneous logins       : no limit
   Password aging            : using system password aging
   Password timestamp        : None
   Last login timestamp      : None
   Failed logins             : 0
   Lockout started           : None
   Logins during grace period: 0
Username: rw
---------
   Access                    : read-write
   State                     : disabled
   Local                     : no
   Login start time          : any
   Login end time            : any
   Allowed login days        : any
   Simultaneous logins       : no limit
   Password aging            : using system password aging
   Password timestamp        : None
   Last login timestamp      : None
   Failed logins             : 0
   Lockout started           : None
   Logins during grace period: 0
System(su)->

show system login Output Details provides an explanation of the command output.

Click to expand in new window

show system login Output Details

Output... What it displays...
Username Login user names.
Access Access assigned to this user account: super-user, read-write or read-only.
State Whether this user account is enabled or disabled.
Local Only? | Local Specifies authentication scope for this user.
  • yes — Specifies that authentication is only by way of the local user database even with RADIUS or TACACS+ configured.
  • no — Specifies that authentication is via configured methods.
Login Start | Login start time Specifies the time at which access begins for this user.
Access End | Login end time Specifies the time at which access ends for this user.
Allowed Days | Allowed login days Specifies the time periods by start and end in 24 hour time and the days of the week for which access is allowed, or states that access is always allowed.
Simultaneous logins Specifies the current number of simultaneous logins for this user.
Password aging Specifies the current password aging setting for this user.
Password timestamp Specifies the start date of the current password for this user.
Last login timestamp Specifies the date and time this user last logged into the system.
Failed logins Specifies the number of times this user failed a login attempt.
Lockout started Specifies if this this user is currently locked out.
Logins during grace period Specifies the number of times this user has logged in during the grace period after this password has aged out.