Users Guide

Command Mode EXEC
Usage Information
By default, the password you configure with the username password command must be at least nine
alphanumeric characters.
Use this command to increase password strength. When you enter the command, at least one parameter is
required. When you enter the character-restriction parameter, at least one option is required.
To reset parameters to their default values, use the no password-attributes command.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S). Also
supported in SmartFabric mode starting in release 10.5.0.1.
Example
OS10(config)# password-attributes min-length 6 character-restriction upper 2
lower 2 numeric 2
Supported
Releases
10.4.0E(R1) or later
password-attributes max-retry lockout-period
Configures a maximum number of consecutive failed login attempts and the lockout period for the user ID.
Syntax
password-attributes {[max-retry number] [lockout-period minutes]}
Parameters
• max-retry number — (Optional) Sets the maximum number of consecutive failed login attempts for a
user before the user is locked out, from 0 to 16.
• lockout-period minutes — (Optional) Sets the amount of time that a user ID is prevented from
accessing the system after exceeding the maximum number of failed login attempts, from 0 to 43,200.
Default
• Maximum number of retries: 3
• Lockout period: 0 — No lockout period is configured. Failed login attempts do not lock out a user.
Command Mode CONFIGURATION
Usage Information
To remove the configured max-retry or lockout-period settings, use the no password-attributes
{max-retry | lockout-period} command.
When a user is locked out due to exceeding the maximum number of failed login attempts, other users can still
access the switch.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.1.0. Also supported
in SmartFabric mode starting in release 10.5.0.1.
Example
OS10(config)# password-attributes max-retry 5 lockout-period 30
Supported
Releases
10.4.1.0 or later
privilege
Creates a privilege level and associates commands with it.
Syntax
privilege mode priv-lvl privilege-level command-string
Parameters
• mode — Enter the privilege mode used to access CLI modes:
• exec — Accesses EXEC mode.
• configure — Accesses class-map, DHCP, logging, monitor, openflow, policy-map, QOS, support-assist,
telemetry, CoS, Tmap, UFD, VLT, VN, VRF, WRED, and alias modes.
• interface — Accesses Ethernet, fibre-channel, loopback, management, null, port-group, lag, breakout,
range, port-channel, and VLAN modes.
950 Security