The login-failed threshold-alarm command configures the alarm and clear alarm thresholds for unsuccessful login attempts within a specified period.
The undo login-failed threshold-alarm command restores the default setting.
By default, an alarm is generated when 30 or more unsuccessful login attempts occur within 5 minutes; a clear alarm is generated when less than 20 unsuccessful login attempts occur within 5 minutes.
| Parameter | Description | Value |
|---|---|---|
| lower-limit resume-times |
Specifies the clear alarm threshold for unsuccessful login attempts. |
The value is an integer ranging from 0 to report-times. For example, if report-times is 50, resume-times ranges from 0 to 50. If report-times is 0, the configuration is the same as that when resume-times is 1. In this case, a clear alarm is generated when no login failure occurs. |
| period period |
Specifies the period. |
The value is an integer ranging from 1 to 120, in minutes. If upper-limit report-times is 0, the period configuration does not take effect. |
| upper-limit report-times |
Specifies the alarm threshold for unsuccessful login attempts. |
The value is an integer ranging from 0 to 100. If the value 0 is specified, no alarm is generated for unsuccessful login attempts. |
Usage Scenario
To trigger alarms when unsuccessful login attempts of management users frequently occur, run the login-failed threshold-alarm command. Within the parameter , when the number of a management user's unsuccessful login attempts is greater than or equal to the parameter , the alarm AAA_1.3.6.1.4.1.2011.5.2.2.2.0.31 hwAdminLoginFailed is generated; when the number of a management user's unsuccessful login attempts is less than the parameter , the clear alarm AAA_1.3.6.1.4.1.2011.5.2.2.2.0.32 hwAdminLoginFailedClear is generated.
Precautions
The value must be greater than or equal to the value.