Timeout login response 与 Exec-timeout

switch(config-line)#timeout ?      
  login  Timeouts related to the login sequence

switch(config-line)#timeout login ?
  response  Timeout for any user input during login sequences

switch(config-line)#timeout login res
switch(config-line)#timeout login response ?
  <0-300>  Timeout in seconds

switch(config-line)# timeout login response 0

 

我本以为设置的时间为0.应该是没有时间限制的意思。

 

User Access Verification

Username:  
% Username:  timeout expired!
Username:  
% Username:  timeout expired!
Username:  
% Username:  timeout expired!

 

switch con0 is now available

 

 

Press RETURN to get started.

可是不问怎么输入都是timeout。 看来这个0。还真是个0的意思。郁闷。只有利用破解密码的方式修改配置再登陆了。

 

 C2950 Boot Loader (C2950-HBOOT-M) Version 12.1(11r)EA1, RELEASE SOFTWARE (fc1)
Compiled Mon 22-Jul-02 17:18 by antonino
WS-C2950-24 starting...
Base ethernet MAC Address: 00:0b:5f:1b:4a:40
Xmodem file system is available.

The system has been interrupted prior to initializing the
flash filesystem.  The following commands will initialize
the flash filesystem, and finish loading the operating  
system software:

    flash_init
    load_helper
    boot

switch:   flash_init
Initializing Flash...
flashfs[0]: 18 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 3965440
flashfs[0]: Bytes available: 3776000
flashfs[0]: flashfs fsck took 7 seconds.
...done initializing flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
switch:   dir flash:
Directory of flash:/

2    -rwx  2664051   <date>               c2950-i6q4l2-mz.121-11.EA1.bin
3    -rwx  269       <date>               env_vars
4    -rwx  1096      <date>               vlan.dat
6    -rwx  3504      <date>               config.text
7    drwx  704       <date>               html
19   -rwx  109       <date>               info
20   -rwx  109       <date>               info.ver
21   -rwx  47        <date>               private-config.text

3776000 bytes available (3965440 bytes used)
switch:   rename flash:config.text flash:config.old
switch:   reset
Are you sure you want to reset the system (y/n)? y
System resetting...

C2950 Boot Loader (C2950-HBOOT-M) Version 12.1(11r)EA1, RELEASE SOFTWARE (fc1)
Compiled Mon 22-Jul-02 17:18 by antonino
WS-C2950-24 starting...
Base ethernet MAC Address: 00:0b:5f:1b:4a:40
Xmodem file system is available.
Initializing Flash...
flashfs[0]: 18 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 3965440
flashfs[0]: Bytes available: 3776000
flashfs[0]: flashfs fsck took 6 seconds.
...done initializing flash.
Boot Sector Filesystem (bs:) installed, fsid: 3
Parameter Block Filesystem (pb:) installed, fsid: 4
Loading "flash:/c2950-i6q4l2-mz.121-11.EA1.bin"...#########################################################################################################################################################################################################################################################################################

File "flash:/c2950-i6q4l2-mz.121-11.EA1.bin" uncompressed and installed, entry point: 0x80010000
executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

 

Cisco Internetwork Operating System Software  
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(11)EA1, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Wed 28-Aug-02 10:25 by antonino
Image text-base: 0x80010000, data-base: 0x80528000

Initializing flashfs...
flashfs[1]: 18 files, 2 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 7741440
flashfs[1]: Bytes used: 3965440
flashfs[1]: Bytes available: 3776000
flashfs[1]: flashfs fsck took 7 seconds.
flashfs[1]: Initialization complete.
Done initializing flashfs.
POST: System Board Test : Passed
POST: Ethernet Controller Test : Passed
ASIC Initialization Passed

POST: FRONT-END LOOPBACK TEST : Passed
cisco WS-C2950-24 (RC32300) processor (revision G0) with 20402K bytes of memory.
Processor board ID FOC0644Y1K1
Last reset from system-reset
Running Standard Image
24 FastEthernet/IEEE 802.3 interface(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:0B:5F:1B:4A:40
Motherboard assembly number: 73-5781-11
Power supply part number: 34-0965-01
Motherboard serial number: FOC06440CE4
Power supply serial number: DAB0642870Q
Model revision number: G0
Motherboard revision number: A0
Model number: WS-C2950-24
System serial number: FOC0644Y1K1

         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]:  
00:00:14: %SPANTREE-5-EXTENDED_SYSID: Extended SysId enabled for type vlan
00:00:17: %SYS-5-RESTART: System restarted --
Cisco Internetwork Operating System Software  
IOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12.1(11)EA1, RELEASE SOFTWARE (fc1)
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Wed 28-Aug-02 10:25 by antonino
% Please answer 'yes' or 'no'.
Would you like to enter the initial configuration dialog? [yes/no]:   n

 

Press RETURN to get started!

Switch>
Switch>
Switch> en

Switch# rename flash:config.old flash:config.text
Destination filename [config.text]?  
Switch# copy flash:config.text system:running-config
Destination filename [running-config]?  
3504 bytes copied in 3.20 secs (1168 bytes/sec)
Switch#
*Mar  1 08:04:40.779: %LINK-5-CHANGED: Interface FastEthernet0/11, changed state to administratively down
*Mar  1 08:04:40.851: %LINK-5-CHANGED: Interface FastEthernet0/12, changed state to administratively down
*Mar  1 08:04:40.915: %LINK-5-CHANGED: Interface FastEthernet0/13, changed state to administratively down
*Mar  1 08:04:40.979: %LINK-5-CHANGED: Interface FastEthernet0/14, changed state to administratively down
*Mar  1 08:04:41.043: %LINK-5-CHANGED: Interface FastEthernet0/15, changed state  
FangshanNode#shto administratively down
*Mar  1 08:04:41.115: %LINK-5-CHANGED: Interface FastEthernet0/16, changed state to administratively down
*Mar  1 08:04:41.179: %LINK-5-CHANGED: Interface FastEthernet0/17, changed state to administratively down
*Mar  1 08:04:41.243: %LINK-5-CHANGED: Interface FastEthernet0/18, changed state to administratively down
*Mar  1 08:04:41.319: %LINK-5-CHANGED: Interface FastEthernet0/19, changed state to administratively down
*Mar  1 08:04:41.779: %LINEPROTO-5-UPDOWN: Line protocol  
FangshanNode#shon Interface FastEthernet0/11, changed state to down
*Mar  1 08:04:41.851: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/12, changed state to down
*Mar  1 08:04:41.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/13, changed state to down
*Mar  1 08:04:41.979: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/14, changed state to down
*Mar  1 08:04:42.011: %LINK-5-CHANGED: Interface Vlan2, changed state to administratively down
*Mar  1 08:04:42.043: %LINEP
FangshanNode#shshoROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/15, changed state to down
*Mar  1 08:04:42.115: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/16, changed state to down
*Mar  1 08:04:42.179: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/17, changed state to down
*Mar  1 08:04:42.243: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/18, changed state to down
*Mar  1 08:04:42.319: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/19, changed
FangshanNode#shsho state to down
*Mar  1 08:04:43.011: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan2, changed state to down
 

Switch#show run  后看 line console 0  自己变成了20。应该是默认值。

line con 0
 timeout login response 20
 logging synchronous
line vty 0 4
 access-class 80 in
line vty 5 15
!
end

 

看来 timeout login response 命令的0 并不是没有时间限制的意思。最高可以设置为300 秒。不过真正对着密码窗口呆上5分钟不输入的人也是很少的。呵呵。看来这个命令使用默认值就可以了。

 

timeout login response 只是针对登录窗口的保活时间。而 exec-timeout 0 0 真对的是登陆到路由器后多少分钟多少秒在没有动作后退出console。

 

switch#conf t 
Enter configuration commands, one per line.  End with CNTL/Z.
switch(config)#line con 0
switch(config-line)#exec-timeout ?
  <0-35791>  Timeout in minutes

switch(config-line)#exec-timeout 0 ?
  <0-2147483>  Timeout in seconds
  <cr>

switch(config-line)#exec-timeout 0 0
switch(config-line)#

 

 

line con 0
 exec-timeout 0 0
 timeout login response 20
 logging synchronous

 

exec-timeout 0 0 还是很有用的命令。可以防止因为短时间离开回来时还需要重新输入密码。特别是在密码很复杂的情况下。但是也是不安全的因素。所以还是需要按需配置。