the flood guard feature controls the aaa service's tolerance for unanswered login attempts. this helps to prevent a denial of service (dos) attack on aaa services in particular. this feature optimizes aaa system use. it is enabled by default and can be controlled with the floodguard 1 command.