Mellanox MLNX-OS®Command Reference Guide for SX1018HP Ethernet Managed Blade Switch

Rev 1.6.2
Mellanox Technologies
139
aaa authentication attempts class-override
aaa authentication attempts class-override {admin [no-lockout] | unknown {no-
track | hash-username}}
no aaa authentication attempts class-override {admin | unknown {no-track |
hash-username}}
Overrides the global settings for tracking and lockouts for a type of account.
The no form of the command removes this override and lets the admin be handled
according to the global settings.
Syntax Description admin Overrides the global settings for tracking and lockouts
for the admin account. This applies only to the single
account with the username “admin”. It does not apply
to any other users with administrative privileges.
no-lockout Prevents the admin user from being locked out, though
the authentication failure history is still tracked (if
tracking is enabled overall).
unknown Overrides the global settings for tracking and lockouts
for unknown accounts. The “unknown” class here con-
tains the following categories:
• Real remote usernames which simply failed authentica-
tion
• Mis-typed remote usernames
• Passwords accidentally entered as usernames
• Bogus usernames made up as part of an attack on the sys-
tem
hash-username Applies a hash function to the username, and stores the
hashed result in lieu of the original.
no-track Does not track authentication for such users (which of
course also implies no-lockout).
Default N/A
Modes/Context Config
History 3.2.3000
Role admin
Example
switch (config) # aaa authentication attempts class-override admin no-
lockout
Related Commands N/A
Note