IWSVA can protect against password brute force attacks. If a remote terminal attempts
to log on to IWSVA with the wrong password using SSH, IWSVA will reject subsequent
log on attempts. This feature is enabled and disabled through the CLI.
To enable the anti-password brute force attack function:
-
Log on to IWSVA using the root, enable, or admin account. "root" and "admin" account
users can log on using SSH, but the "enable" account users can only log on to the
IWSVA local machine.
-
If logging on with the root account, type clish
and enable
to access the clish privileged mode.
-
If logging on with the admin account, type enable
to access the clish privileged mode.
-
If logging on with the enable account, you are already in the clish privileged mode.
-
To enable the function, type the following command: configure service pswd_protection enable
-
To disable the anti-password, brute force attack function:
-
Follow Step 1 in the previous procedure.
-
To disable the function, type the following command:configure service pswd_protection disable
.