Connectivity Guide

Command Mode EXEC
Usage Information
• By default, the password you congure with the username password command must be at least nine
alphanumeric characters.
• Use this command to increase password strength. When you enter the command, at least one parameter is
required. When you enter the character-restriction parameter, at least one option is required.
•
To reset parameters to their default values, enter the no password-attributes command.
Example
OS10(config)# password-attributes min-length 6 character-restriction upper 2
lower 2 numeric 2
Supported Releases 10.4.0E(R1) or later
password-attributes max-retry lockout-period
Congures a maximum number of consecutive failed login attempts and the lockout period for the user ID.
Syntax
password-attributes {[max-retry number] [lockout-period minutes]}
Parameters
• max-retry number — (Optional) Sets the maximum number of consecutive failed login attempts for a user
before the user is locked out, from 0 to 16.
• lockout-period minutes — (Optional) Sets the amount of time that a user ID is prevented from
accessing the system after exceeding the maximum number of failed login attempts, from 0 to 43,200.
Default
• Maximum retries: 3 — A maximum of three failed login attempts is supported.
• Lockout period: 0 — No lockout period is congured. Failed login attempts do not lock out a user.
Command Mode CONFIGURATION
Usage Information
• To remove the congured max-retry or lockout-period settings, enter the no password-
attributes {max-retry | lockout-period} command.
• When a user is locked out due to exceeding the maximum number of failed login attempts, other users can still
access the switch.
Example
OS10(config)# password-attributes max-retry 5 lockout-period 30
Supported Releases 10.4.1.0 or later
radius-server host
Congures a RADIUS server and the key used to authenticate the switch on the server.
Syntax
radius-server host {hostname | ip-address} key {0 authentication-key | 9
authentication-key | authentication-key} [auth-port port-number]
Parameters
• hostname — Enter the host name of the RADIUS server.
• ip-address — Enter the IPv4 (A.B.C.D) or IPv6 (x:x:x:x::x) address of the RADIUS server.
• key 0 authentication-key — Enter an authentication key in plain text. A maximum of 42 characters.
• key 9 authentication-key — Enter an authentication key in encrypted format. A maximum of 128
characters.
System management 631