Administrator lockout

This topic provides information about the administrator locout details.

By default, the administrator is not locked out of the device even after max-retry failures. To lock the administrator out, execute the below command:

device(config)# password-attributes admin-lockout

When the administrator is locked-out, the device allows access for the administrator after the value set for max-lockout-duration has elapsed.

Note

The administrator logins over the serial port/console, which is never locked out and can login over the network again only if the admin-lockout password attribute is disabled.

To allow the administrator to login over the network and disable administrator lockout execute the below commands:

device# configure terminal

device(config)# no password-attributes admin-lockout

Reference the Extreme SLX-OS Security Configuration Guide, 20.2.1 – Password Policies for further details