Lock and Unlock SSH Failed Login

CentOS 7

Configuration password-auth 
#vi /etc/pam.d/password-auth

AUTH configuration line to it at beginning of the ‘auth‘ section  
auth        required      pam_tally2.so  file=/var/log/tallylog deny=3 even_deny_root unlock_time=120

Next, add the following line to ‘account‘ section.
account     required      pam_tally2.so

Parameters
    file=/var/log/tallylog – Default log file is used to keep login counts.
    deny=3 – Deny access after 3 attempts and lock down user.
    even_deny_root – Policy is also apply to root user.
    unlock_time=1200 – Account will be locked till 20 Min. (remove this parameters if you want to lock down permanently till manually         unlock.)


------------ THE END -------------------------