set user-account-unlock-time
To specify the amount of time a user remains locked out of the system after reaching the maximum number
of login attempts, use the set user-account-unlock-time command.
set user-account-unlock-time unlock_time
Syntax Description
The amount of time in seconds a user remains locked out of the system. The
value can range from 600 to 36000; the default is 1800 seconds (30 minutes).
unlock_time
Command Modes
Security mode
Command History
ModificationRelease
Command added.1.1(1)
Usage Guidelines
If any user (including admin users) exceeds the specified maximum number of login attempts, the user is
locked out of the system and must wait this amount of time before being allowed to log in again. No notification
appears indicating that the user is locked out.
Example
This example shows how to enter security mode and specify the amount of time that must pass before
a locked-out user can log in again:
FP9300-A # scope security
FP9300-A /security # set user-account-unlock-time 900
FP9300-A /security* # commit-buffer
FP9300-A /security #
Related Commands
DescriptionCommand
Clears a user’s locked-out status.clear lock-status
Specifies the maximum number of failed login attempts before the user is
locked out of the system.
set max-login-attempts
Cisco Firepower 4100/9300 FXOS Command Reference
229
S Commands
set user-account-unlock-time