Command Line Interface Guide
Page 27
...exit command is used to the User EXEC mode from the Privileged EXEC mode to the Global Configuration mode. The default host name is case sensitive. The password is not displayed on the screen and is Console unless it was changed using the hostname command in the Global ... return from the Interface Configuration mode to the User EXEC mode, use because, many of the device host name followed by #. The password is displayed. Global Configuration Mode Global Configuration mode commands apply to prevent unauthorized use the disable command. Privileged users enter directly into the ...
...exit command is used to the User EXEC mode from the Privileged EXEC mode to the Global Configuration mode. The default host name is case sensitive. The password is not displayed on the screen and is Console unless it was changed using the hostname command in the Global ... return from the Interface Configuration mode to the User EXEC mode, use because, many of the device host name followed by #. The password is displayed. Global Configuration Mode Global Configuration mode commands apply to prevent unauthorized use the disable command. Privileged users enter directly into the ...
Command Line Interface Guide
Page 31
...Repeating the key sequence will recall successively more recent commands in the history buffer after recalling commands with the most recent command. By default, the history buffer system is recorded on a First In First Out (FIFO) basis. The standard number of Commands For many configuration... commands, the prefix keyword no encrypted data, like encrypted passwords or keys. By configuring 0, the effect is not preserved across device resets. Using the CLI 31 When copying and pasting commands from a...
...Repeating the key sequence will recall successively more recent commands in the history buffer after recalling commands with the most recent command. By default, the history buffer system is recorded on a First In First Out (FIFO) basis. The standard number of Commands For many configuration... commands, the prefix keyword no encrypted data, like encrypted passwords or keys. By configuring 0, the effect is not preserved across device resets. Using the CLI 31 When copying and pasting commands from a...
Command Line Interface Guide
Page 64
... configuration mode of the DHCP snooping binding file. Sets an IP address. Defines a default domain name, that the software uses to normal and privilege levels. Specifies or modifies the device host name. Globally enables DHCP snooping. enable password end file-system logging gvrp enable (Global) hostname interface ethernet interface port-channel interface...
... configuration mode of the DHCP snooping binding file. Sets an IP address. Defines a default domain name, that the software uses to normal and privilege levels. Specifies or modifies the device host name. Globally enables DHCP snooping. enable password end file-system logging gvrp enable (Global) hostname interface ethernet interface port-channel interface...
Command Line Interface Guide
Page 72
.... Configures the interval that the system waits until user input is the "port default VLAN ID (PVID)". Specifies a password on an egress port. Sets the expiration time of line passwords in general mode. Configures the baud rate of the specified VLAN, and the ...a member of the line. LC (Line Configuration) Mode Command Group autobaud enable authentication exec-timeout history history size login authentication password password-aging speed Description Configures the line for automatic baud rate detection (autobaud) Specifies the authentication method list when accessing a higher ...
.... Configures the interval that the system waits until user input is the "port default VLAN ID (PVID)". Specifies a password on an egress port. Sets the expiration time of line passwords in general mode. Configures the baud rate of the specified VLAN, and the ...a member of the line. LC (Line Configuration) Mode Command Group autobaud enable authentication exec-timeout history history size login authentication password password-aging speed Description Configures the line for automatic baud rate detection (autobaud) Specifies the authentication method list when accessing a higher ...
Command Line Interface Guide
Page 75
...the device. show dot1x advanced Displays 802.1x enhanced features for the device or for IP. show passwords configuration Displays information about password management. show running configuration file. show interfaces access-lists Displays access lists applied on interfaces. show snmp...configuration. show interfaces switchport Displays switchport configuration. show management access-list Displays management access-lists. show hosts Displays the default domain name, a list of name server hosts, the static and the cached list of logging and the syslog ...
...the device. show dot1x advanced Displays 802.1x enhanced features for the device or for IP. show passwords configuration Displays information about password management. show running configuration file. show interfaces access-lists Displays access lists applied on interfaces. show snmp...configuration. show interfaces switchport Displays switchport configuration. show management access-list Displays management access-lists. show hosts Displays the default domain name, a list of name server hosts, the static and the cached list of logging and the syslog ...
Command Line Interface Guide
Page 81
... list of methods when a user logs in . (Range: 1 - 12 characters) • method1 [method2...] - Uses the line password for authentication. Uses the local username database for authentication. AAA Commands 81 Character string used to the default configuration. Default Configuration The local user database is not defined. Specify at least one from the following table...
... list of methods when a user logs in . (Range: 1 - 12 characters) • method1 [method2...] - Uses the line password for authentication. Uses the local username database for authentication. AAA Commands 81 Character string used to the default configuration. Default Configuration The local user database is not defined. Specify at least one from the following table...
Command Line Interface Guide
Page 82
...8226; The additional methods of authentication are used to the default configuration. Use the no aaa authentication enable {default | list-name} • default - Specify at the local user database. Uses the line password for accessing higher privilege levels. Character string used to name...levels. • list-name - Example The following table: Keyword enable line none Description Uses the enable password for authentication. User Guidelines • The default and optional list names created with the login authentication command. • Create a list by entering the ...
...8226; The additional methods of authentication are used to the default configuration. Use the no aaa authentication enable {default | list-name} • default - Specify at the local user database. Uses the line password for accessing higher privilege levels. Character string used to name...levels. • list-name - Example The following table: Keyword enable line none Description Uses the enable password for authentication. User Guidelines • The default and optional list names created with the login authentication command. • Create a list by entering the ...
Command Line Interface Guide
Page 83
... is the requested privilege level. This has the same effect as using the command aaa authentication enable default enable none. Example The following example sets the enable password for a remote telnet or console. AAA Commands 83 where x is used only if the previous method ... not set , the process still succeeds. This has the same effect as the command aaa authentication enable default enable. Use the no password is set , only the enable password is the privilege level. To ensure that the authentication succeeds even if all methods return an error, specify...
... is the requested privilege level. This has the same effect as using the command aaa authentication enable default enable none. Example The following example sets the enable password for a remote telnet or console. AAA Commands 83 where x is used only if the previous method ... not set , the process still succeeds. This has the same effect as the command aaa authentication enable default enable. Use the no password is set , only the enable password is the privilege level. To ensure that the authentication succeeds even if all methods return an error, specify...
Command Line Interface Guide
Page 88
... Commands Use the no password • password - Command Mode Line Configuration mode. Line Console Telnet SSH Login Method List Default Default Default Enable Method List Default Default Default http https dot1x console# : Local : Local : password The password Line Configuration mode command specifies a password on a console. Encrypted password to remove the password. User Guidelines If a password is defined as encrypted, the required password length is defined.
... Commands Use the no password • password - Command Mode Line Configuration mode. Line Console Telnet SSH Login Method List Default Default Default Enable Method List Default Default Default http https dot1x console# : Local : Local : password The password Line Configuration mode command specifies a password on a console. Encrypted password to remove the password. User Guidelines If a password is defined as encrypted, the required password length is defined.
Command Line Interface Guide
Page 89
... user level. (Range: 1 - 15) • encrypted - enable password The enable password Global Configuration mode command sets a local password to control access to privilege levels. Encrypted password entered, copied from another device configuration. Syntax • enable password [level level] password [encrypted] • no username name • name - Default Configuration No enable password is 15. (Range: 1 - 15) • encrypted - AAA...
... user level. (Range: 1 - 15) • encrypted - enable password The enable password Global Configuration mode command sets a local password to control access to privilege levels. Encrypted password entered, copied from another device configuration. Syntax • enable password [level level] password [encrypted] • no username name • name - Default Configuration No enable password is 15. (Range: 1 - 15) • encrypted - AAA...
Command Line Interface Guide
Page 90
Example The following example configures user bob with password lee and user level 15 to the system. Console(config)# username bob password lee level 15 90 AAA Commands Command Mode Global Configuration mode User Guidelines User account can be created without a password. Default Configuration No user is defined.
Example The following example configures user bob with password lee and user level 15 to the system. Console(config)# username bob password lee level 15 90 AAA Commands Command Mode Global Configuration mode User Guidelines User account can be created without a password. Default Configuration No user is defined.
Command Line Interface Guide
Page 269
...day (MOTD) banner appears first, followed by the login banner and prompts. User Guidelines • Follow this command to delete the existing Login banner. Default Configuration Disabled (no banner login • d - After the user logs in the banner message. • message - A delimiting character cannot be ...connects to the device, the EXEC banner is displayed). The message must start in the message text can be displayed before the username and password login prompts. Tokens in the form $(token) in a new line and can be used in to a device, the message-of ...
...day (MOTD) banner appears first, followed by the login banner and prompts. User Guidelines • Follow this command to delete the existing Login banner. Default Configuration Disabled (no banner login • d - After the user logs in the banner message. • message - A delimiting character cannot be ...connects to the device, the EXEC banner is displayed). The message must start in the message text can be displayed before the username and password login prompts. Tokens in the form $(token) in a new line and can be used in to a device, the message-of ...
Command Line Interface Guide
Page 335
... -write access. • su - The view defines the objects available to the SNMP protocol. Management station IPv4 address. SNMP Commands 335 Default is all the objects except of a previously defined view. Command Mode Global Configuration mode. Syntax • snmp-server community community [ro |... name of this command to the community. (Range: 1 - 30 characters) Default Configuration No communities are available. (Range: 1 - 30 characters) • ipv4-address - Community string that acts like a password and permits access to the whole MIB. It's not relevant for su, which...
... -write access. • su - The view defines the objects available to the SNMP protocol. Management station IPv4 address. SNMP Commands 335 Default is all the objects except of a previously defined view. Command Mode Global Configuration mode. Syntax • snmp-server community community [ro |... name of this command to the community. (Range: 1 - 30 characters) Default Configuration No communities are available. (Range: 1 - 30 characters) • ipv4-address - Community string that acts like a password and permits access to the whole MIB. It's not relevant for su, which...
Command Line Interface Guide
Page 342
...0x000000001. • The show running-config Privileged EXEC mode command does not display the SNMP engine ID configuration. By default, SNMPv1/v2 are enabled on both the password and the local engine ID. This digest is converted to indicate the MAC address that consists of the engine ID ... specify an engine ID that follows. • Last 6 octets - MAC address of the engine ID up to configure the engine ID. - A user's password (entered on the command line) is based on the device. You can specify snmp-server engineID local 1234. • Since the engine ID should be...
...0x000000001. • The show running-config Privileged EXEC mode command does not display the SNMP engine ID configuration. By default, SNMPv1/v2 are enabled on both the password and the local engine ID. This digest is converted to indicate the MAC address that consists of the engine ID ... specify an engine ID that follows. • Last 6 octets - MAC address of the engine ID up to configure the engine ID. - A user's password (entered on the command line) is based on the device. You can specify snmp-server engineID local 1234. • Since the engine ID should be...
Command Line Interface Guide
Page 345
...; ip6-address - When the IPv6 address is 3. (Range: 0 - 255) Default Configuration This command has no snmp-server host {ip4-address | ip6-address | hostname} [traps | informs] • ip4-address - Specifies a password-like community string sent with the notification operation. (Range: 1 - 20) •... host IPv6 address (the targeted recipient). Not applicable to wait for an acknowledgment before resending informs. If unspecified, the default timeout period is automatically generated for the interface name syntax. • hostname - Indicates that SNMPv2 traps will be selected...
...; ip6-address - When the IPv6 address is 3. (Range: 0 - 255) Default Configuration This command has no snmp-server host {ip4-address | ip6-address | hostname} [traps | informs] • ip4-address - Specifies a password-like community string sent with the notification operation. (Range: 1 - 20) •... host IPv6 address (the targeted recipient). Not applicable to wait for an acknowledgment before resending informs. If unspecified, the default timeout period is automatically generated for the interface name syntax. • hostname - Indicates that SNMPv2 traps will be selected...
Command Line Interface Guide
Page 441
... 8 characters required for passwords. (Range: 8 - 64 characters) Default Configuration No minimum password length. Similarly, the length of encrypted passwords is defined or a user enters an unencrypted password when logging in. Example The following example configures a minimum length of this command to local user passwords, line passwords, and enable passwords. • The software checks the password length when an unencrypted...
... 8 characters required for passwords. (Range: 8 - 64 characters) Default Configuration No minimum password length. Similarly, the length of encrypted passwords is defined or a user enters an unencrypted password when logging in. Example The following example configures a minimum length of this command to local user passwords, line passwords, and enable passwords. • The software checks the password length when an unencrypted...
Command Line Interface Guide
Page 442
... login for another 3 times. • 10 days before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is generated. Use the no form of this command to disable password expiration time. 442 TIC Commands The number of line passwords. Console (config-line)# password-aging 5 passwords aging The passwords aging Global Configuration mode command configures the aging time...
... login for another 3 times. • 10 days before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is generated. Use the no form of this command to disable password expiration time. 442 TIC Commands The number of line passwords. Console (config-line)# password-aging 5 passwords aging The passwords aging Global Configuration mode command configures the aging time...
Command Line Interface Guide
Page 443
... of required password changes before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is generated. Console (config)# passwords aging username 40 passwords history The passwords history Global Configuration mode command sets the number of global passwords. Syntax • passwords aging username name days • no passwords aging username name • passwords aging enable-password level days • no passwords history •...
... of required password changes before a password change is forced. (Range: 1 - 365) Default Configuration Password aging is generated. Console (config)# passwords aging username 40 passwords history The passwords history Global Configuration mode command sets the number of global passwords. Syntax • passwords aging username name days • no passwords aging username name • passwords aging enable-password level days • no passwords history •...
Command Line Interface Guide
Page 444
...; If the user enters a password that is relevant for tracking its password history. (Range: 1 - 365) Default Configuration Disabled. Command Mode Global Configuration mode. Console(config)# passwords history 3 passwords history hold-time The passwords history hold -time days • no form of days a password is not included in the password history count. Syntax • passwords history hold -time Global Configuration...
...; If the user enters a password that is relevant for tracking its password history. (Range: 1 - 365) Default Configuration Disabled. Command Mode Global Configuration mode. Console(config)# passwords history 3 passwords history hold-time The passwords history hold -time days • no form of days a password is not included in the password history count. Syntax • passwords history hold -time Global Configuration...
User's Guide
Page 56
...a BOOTP client. AAA uses both local and remote user databases. If a user-defined password is now configured with no password entered. 56 Configuring PowerConnect 3524/P and 3548/P Security Management and Password Configuration System security is handled through the SSH mechanism. Are you sure you want to ..., and Accounting (AAA) mechanism that manages user access rights, privileges, and management methods. The procedure is delivered with no default password configured; To retrieve an IP address from a BOOTP server: 1 Select and connect any input at the ASCII terminal or ...
...a BOOTP client. AAA uses both local and remote user databases. If a user-defined password is now configured with no password entered. 56 Configuring PowerConnect 3524/P and 3548/P Security Management and Password Configuration System security is handled through the SSH mechanism. Are you sure you want to ..., and Accounting (AAA) mechanism that manages user access rights, privileges, and management methods. The procedure is delivered with no default password configured; To retrieve an IP address from a BOOTP server: 1 Select and connect any input at the ASCII terminal or ...