APIC, LEAF, and SPINE SSH Timeouts and Logon Attempts

[matthew.sterling.ctr]

Is there any way to set the SSH timeouts for the APIC, LEAF, and SPINE devices? I can't seem to find the commands in the GUI or the CLI...

Also, the default logon attempt max is set to 5 is there any way to configure max logon attempts to 3?

[Robert Burns]

Login attempts & GUI timeouts are managed under Security Management:  Admin > AAA > Security Management

Robert

[matthew.sterling.ctr]

GUI timeouts are managed there, and I have already set them. I am looking to configure SSH timeouts and logon attempts.

Also, there is no setting under security management for login attempts (at least not that I can see).

Thanks.

[Robert Burns]

Apologies was looking at a different value.  I don't believe those two options are currently configurable (SSH timeout & login attempts).  Let me confirm with Eng and get back to you if this is possible or on the roadmap.

Robert

[matthew.sterling.ctr]

Thanks! I'd still like to know if they are currently configurable or not (that would help). Or if it is on the current road map.

[hubin1]

Hi Robert - did you find any additional info? such as default value and if there is a roadmap?

[Robert Burns · Accepted solution]

Confirmed that "GUI idle timeout" affects SSH on both APIC & Switches.

Robert

[peterzhang]

Best trick I learned today, thank you Robert! Didn't know how to set the SSH timeout until today...

Peter

[Daniel Ash]

Thanks Robert!  I was able to bump up my webtoken timeout as a workaround for hitting Bug CSCux04425.  I will change the webtoken timeout back to default 600 (10 minutes) after finishing my upgrade.