CLI Guide - WatchGuard Technologies

CHAPTER 2: Administration Mode Commands
account command
WG#admin
WG(admin)#account
-login_limit
-login_limit
-status
-unlock |all
-all
Effect
Allows you to view, set, and clear failed login attempt limits.
Login limits provide a further level of security, and
eliminate susceptibility to a “brute force” password hacks.
The account management feature is available in all three
operation modes (normal, FIPS, and CC).
The CLI allows only the root superadmin “admin” to log
in, while rejecting all other accounts, including userdefined
superamin accounts. If you set the login_limit
feature on the root superadmin user, it is possible for the
superadmin to be locked out of the system.
To work around this possible problem:
1 Create another superadmin account in addition to the
root superadmin “admin” account, using Vcontroller,
before you set the login_limit for the root
superadmin account.
If the root superadmin “admin” is locked out because of
exceeded login failures, you can use this separate, non-root-level
superadmin account to login to Vcontroller with full
administration privileges.
2 In a text editor, create and save an ASCII text file with
the following two lines:
admin
account -unlock admin
3 In Vcontroller, click Diagnostics/CLI and select the CLI
tab.
This feature allows you to select a text file that contains CLI
commands.
28 WatchGuard Vclass 5.1