Restrict login attempts : login block-for command
When logging into a Cisco device via Telnet/SSH, you can restrict login attempts. After a certain number of failed login attempts, the login will be blocked. This prevents unauthorized login by brute force attack.
The following section describes configuration for restricting login attempts for Cisco devices.