Download Thesis_HenrikGrankvist_WilliamKvarnstrom

Copyright 2014 ABB. All rights reserved.
8.4 4 - Login
8.4.1
8.4.1.1
4.1 Unsuccessful login attempts
The purpose of the test
This test will verify that unsuccessful login attempts will lock a user out from connecting to
the switch.
This test is based on these demands that the IEC62443-standard sets:
IEC 62443-4-2: NCR 1.11 Unsuccessful login attempts. States that the network device
shall provide the capability to enforce a limit of consecutive invalid access attempts by
any user. The switch shall provide the capability to temporarily deny access when the
maximum number of unsuccessful attempts is exceeded for a configurable time period or
until the lockout is manually recovered.
8.4.1.2
Preparation and input data
Make sure that there are at least two user accounts in the local user-database. You do
not want to be locked out if this test is successful.
Part 3 of this test requires that test 3.1 has been done and is successful.
8.4.1.3
Procedure
Part 1: Verify that a user can get locked when it has exceeded a number of unsuccessful
login attempts within a certain time-period.
1. Configure the switch to lock a user if it unsuccessfully tries to login, if this is not
done by default.
2. Try to login to the switch using telnet or SSH, purposefully using the wrong
password.
a. Repeat a maximum of 10 times.
3. Verify that the user got locked by trying to login using the correct username and
password.
Part 2: Verify that as an admin user you can unlock a locked user.
1. Use the other user account and try to unlock the locked user.
2. Verify that the user got unlocked by trying to login using the recently locked user.
Part 3: Verify that invalid access attempts to the switch are logged.
1. Configure the device to log invalid access attempts, if this is not by default.
2. Try to login to the switch, purposefully using the wrong password.
3. Verify on the syslog-server that a log as created about the invalid access attempt.
8.4.1.4
Expected result
Part 1: The user account will not be able to be used to login with.
Part 2: The user account will be able to be used to login with.
Part 3: A log event was created on the syslog-server.
Doc. no.
ABB AB
Lang.
3BSE079920
en
Rev. ind.
Page
30