Limit number of simultaneous remote management sessions
It is possible to configure the number of allowed simultaneous remote sessions (SSH, Telnet and Web). By default, the limit will be disabled. Login via console or SNMP access are not considered in this limit. If a limit is set, it is strongly recommended to set inactivity timeouts for all enabled remote login methods, to avoid locking out users.
In the example below, simultaneous remote sessions are limited to three, and inactivity timeouts are set for Web (5 minutes) and SSH (300 seconds), assuming Telnet is disabled.
example:/#> configure example:/config/#> management example:/config/management/#> max-remote-sessions 3 example:/config/management/#> web example:/config/management/web/#> session-timeout 5 example:/config/management/web/#> end example:/config/management/#> ssh example:/config/management/ssh/#> idle-timeout 300 example:/config/management/ssh/#>
With this setting and three active sessions (e.g., one Web access and two SSH session), an attempt to open another SSH session will be rejected.
Syntax
The limitation of remote sessions service is available from the management configuration context in the CLI:
[no] max-remote-sessions <1..31>
- Set or disable the limitation of simultaneous remote sessions.