Comware

 View Only
  • 1.  Config parameter security

    Posted 17 hours ago

    Hi everyone, I want to implement this on an Aruba switch. Is it supported? It blocks logins for 360 seconds if there are 5 failures within 360 seconds.



  • 2.  RE: Config parameter security

    Posted 4 hours ago

    Yes, though "Aruba switch" covers three different OSes and the command is different on each. One thing up front: none of them do Cisco's rolling window. They count consecutive failures and reset on a good login, so "5 within 360 seconds" effectively becomes "5 in a row".

    On Comware it's password-control enable then password-control login-attempt 5 exceed lock-time 6, and lock time is in minutes there so 6 gives you your 360 seconds. On AOS-CX it's aaa authentication limit-login-attempts 5 lockout-time 360, which covers SSH, REST and Telnet and only works when you're not pointing at TACACS+ or RADIUS. On AOS-S it's aaa authentication num-attempts 5 with aaa authentication lockout-delay 360.

    Both AOS platforms have a separate console command as well, and turning both on at once can lock you out of every interface. Keep a second session open when you test it, because there's no key under the mat.

    Which platform are you on?



    ------------------------------
    Dustin Burns

    @Worldcom Exchange, Inc.


    If my post was useful accept solution and/or give kudos
    ------------------------------