User guide

Chapter 7: Using the Command Line Interface
174
<value1> is a numeric value in days set for the password aging
interval. The interval ranges from 7 to 365 days.
<value2> is a numeric value in minutes set for the idle timeout. The
timeout ranges from 1 to 1440 minutes (24 hours).
Tip: You can combine multiple commands to modify the login limitation
parameters at a time. See Multi-Command Syntax (on page 214).
Example
The following command sets up three parameters for the login limitation
feature.
config:# security loginLimits singleLogin disable passwordAging enable
passwordAgingInterval 90
Results:
The single login feature is disabled.
The password aging feature is enabled.
The password aging interval is set to 90 days.
User Blocking
There are different commands for changing different user blocking
parameters. These commands begin with security userBlocking.
To determine the maximum number of failed logins before
blocking a user, use this command syntax:
config:# security userBlocking maximumNumberOfFailedLogins <value1>
To determine how long a user's login is blocked, use this
command syntax:
config:# security userBlocking blockTime <value2>
Variables:
<value1> is an integer between 3 and 10, or unlimited, which sets no
limit on the maximum number of failed logins and thus disables the
user blocking function.
<value2> is a numeric value in minutes.
Tip: You can combine multiple commands to modify the user blocking
parameters at a time. See Multi-Command Syntax (on page 214).