API Guide

Configure EXEC session timeout
Rationale: By default, there is no EXEC timeout configured. To prevent unauthorized access to the EXEC mode, configure a
timeout interval.
Configuration:
OS10(config)# exec-timeout timeout-value
OS10(config)# exit
OS10# write memory
timeout-value—Specify the number of seconds of inactivity on the system before disconnecting the current session (0 to
3600).
Limit concurrent login sessions
Rationale: To avoid an unlimited number of active sessions on a switch for the same user ID, limit the number of console and
remote connections.
Configuration:
OS10(config)# login concurrent-session limit-number
OS10(config)# exit
OS10# write memory
limit-number—Specify the number of concurrent sessions that any user can have on the console or virtual terminal lines (1
to 12).
Ensure user lockout
Rationale: Configure the system to prevent the user from logging in to the system for a specific time after a specified number
of failed login attempts.
Configuration:
OS10(config)# password-attributes max-retry number lockout-period minutes
OS10(config)# exit
OS10# write memory
● max-retry number—(Optional) Sets the maximum number of consecutive failed login attempts for a user before the
user is locked out, from 0 to 16.
● lockout-period minutes—(Optional) Sets the amount of time that a user ID is prevented from accessing the system
after exceeding the maximum number of failed login attempts, from 0 to 43,200.
Enable login statistics
Rationale: Enable login statistics to view user login information, including the number of successful and failed logins, role
changes, and the last time a user logged in, displays after a successful login. After enabling login statistics, you can use the
show login statistics {all | user} command to view user login information.
Configuration:
OS10(config)# login-statistics enable
OS10(config)# exit
OS10# write memory
Banner rules
Display a message before and after a user logs in to the system. These messages can communicate legal rights to the user and
assume consent to the usage policy by the user.
Enable login banner
Rationale: The login banner is displayed to the user when the user attempts to log in to the system.
Configuration:
OS10(config)# banner login %
DellEMC S4148U-ON login
Enter your username and password
%
16
OS10 security best practices