Connectivity Guide

Parameters
● max-retry number — (Optional) Sets the maximum number of consecutive failed login attempts
for a user before the user is locked out, from 0 to 16.
● lockout-period minutes — (Optional) Sets the amount of time that a user ID is prevented from
accessing the system after exceeding the maximum number of failed login attempts, from 0 to 43,200.
Default
● Maximum retries: 3 — A maximum of three failed login attempts is supported.
● Lockout period: 0 — No lockout period is configured. Failed login attempts do not lock out a user.
Command Mode CONFIGURATION
Usage
Information
● To remove the configured max-retry or lockout-period settings, enter the no password-
attributes {max-retry | lockout-period} command.
● When a user is locked out due to exceeding the maximum number of failed login attempts, other users
can still access the switch.
Example
OS10(config)# password-attributes max-retry 5 lockout-period 30
Supported
Releases
10.4.1.0 or later
privilege
Create a privilege level and associate commands with it.
Syntax
privilege mode priv-lvl privilege-level command-string
Parameters
● mode—Enter the privilege mode where you are configuring the specific command. The following table
lists the available privilege modes and their corresponding command modes:
Privilege
mode
CLI mode
Exec Exec
configure class-map, DHCP, logging, monitor, openflow, policy-map, QOS, support-assist,
telemetry, CoS, Tmap, UFD, VLT, VN, VRF, WRED, or alias
interface Ethernet, FC, loopback, mgmt, null, port-group, lag, breakout, range, port-
channel, VLAN
route-map route-map
router router-bgp or router-ospf
line line-vty
● priv-lvl—Enter the keyword and then the privilege number, from 2 to 14.
● command-string—Enter the specific command.
Defaults Not configured
Command Mode CONFIGURATION
Usage
Information
You cannot configure a privilege level less than 2 for users assigned to sysadmin, netadmin, and
secadmin roles.
If a command that you associate with a privilege level has a space, enter that command within double
quotes. If a command does not have a space or separated by a hyphen, double quotes are not needed.
The no version of this command removes a command from a privilege level.
Example
OS10(config)# privilege exec priv-lvl 3 "configure terminal"
OS10(config)# privilege configure priv-lvl 3 "interface ethernet"
OS10(config)# privilege interface priv-lvl "ip address"
OS10(config)# privilege configure priv-lvl 3 route-map
OS10(config)# privilege route-map priv-lvl 3 "set local-preference"
778 Security