Users Guide

Usage
Information
By default, the password you configure with the username password command must be at least nine
alphanumeric characters.
Use this command to increase password strength. When you enter the command, at least one parameter
is required. When you enter the character-restriction parameter, at least one option is required.
To reset parameters to their default values, use the no password-attributes command.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.0E(R3S).
Also supported in SmartFabric mode starting in release 10.5.0.1.
Example
OS10(config)# password-attributes min-length 6 character-restriction
upper 2 lower 2 numeric 2
Supported
Releases
10.4.0E(R1) or later
password-attributes max-retry lockout-period console-exempt
Configures a maximum number of consecutive failed login attempts, the lockout period, and console login exemption for the user
ID.
Syntax
password-attributes {[max-retry number] [lockout-period minutes] [console-
exempt]}
Parameters
● max-retry number — (Optional) Sets the maximum number of consecutive failed login attempts
for a user before the user is locked out, from 0 to 16.
● lockout-period minutes — (Optional) Sets the amount of time that a user ID is prevented from
accessing the system after exceeding the maximum number of failed login attempts, from 0 to 43,200.
● console-exempt—Applicable only if the user lockout feature is enabled. Enables the user to log in
through the console, even though the user ID is blocked because of existing lockout.
Default
● Maximum number of retries: 3
● Lockout period: 5 minutes
Command Mode CONFIGURATION
Usage
Information
To remove the configured max-retry or lockout-period or console-exempt settings, use the no
password-attributes {max-retry | lockout-period | console-exempt} command.
When a user is locked out due to exceeding the maximum number of failed login attempts, other users can
still access the switch. If the console-exempt option is enabled, the locked out user can log in through
the console, even though the user ID is locked out because of failed password attempts.
NOTE: Dell Technologies recommends that you configure the lockout period to be a nonzero value. If
you set this value to zero, no lockout period is configured. Any number of failed login attempts do not
lock out a user.
Supported on the MX9116n and MX5108n switches in Full Switch mode starting in release 10.4.1.0. Also
supported in SmartFabric mode starting in release 10.5.0.1.
Example
OS10(config)# password-attributes max-retry 5 lockout-period 30 console-
exempt
Supported
Releases
10.4.1.0 or later
privilege
Creates a privilege level and associates commands with it.
Syntax
privilege mode priv-lvl privilege-level command-string
Parameters
● mode — Enter the privilege mode used to access CLI modes:
1310 Security