Restrict user attempts to log on

Restrict user attempts to log on-Linux general technology-Linux technology and application information. The following is a detailed description. Dear heroes:

I made a configuration in/etc/pam. d/system-auth to limit the number of user attempts:
Add the following sentence at the beginning of the auth field:
Auth required pam_tally.so deny = 3 unlock_time = 300 even_deny_root_accounct no_reset
Add at the beginning of the account Field
Account required pam_tally.so
The purpose of these statements is to deny the Account Login for 300 seconds after logon failure three times in a row, and after successful logon, the counter is not reset to zero (no_reset), but I tried it several times.
After successfully logging on, the system returns to zero. I 'd like to know how to handle this problem!