First login and authentication

Bootstrap administrator and personal SSH-backed sessions.

Two sign-in paths

Portivo supports a local bootstrap administrator and personal SSH-backed access. The bootstrap administrator is used for initial platform setup and complete administration. SSH-backed users authenticate with their own switch credentials through the configured authentication-source path.

Personal SSH credentials

Authentication sources

Administrators can define up to five enabled switches used only to validate personal SSH credentials during sign-in. Automatic selection prefers recently reachable candidates. The default authentication source timeout is controlled by AUTH_CONNECT_TIMEOUT and the overall sign-in window by AUTH_GLOBAL_TIMEOUT_SECONDS.

Login throttling

Progressive throttling is enabled by default. It tracks failures by source IP plus username and also by source IP before local verification or SSH/AAA authentication is attempted. It does not use a hard account lockout.

Password policy

New or changed local administrator passwords require 12 to 128 characters. Existing hashes remain valid after upgrade until the password is changed.