Command Line Interface Guide
Page 20
...timeout 437 tacacs-server source-ip 437 show tacacs 438 33 TIC Commands 441 passwords min-length 441 password-aging 442 passwords aging 442 passwords history 443 passwords history hold-time 444 passwords lockout 445 aaa login-history file 446 set username active 446 set line ...active 447 set enable-password active 447 show passwords configuration 448 show users login-history 450 show...
...timeout 437 tacacs-server source-ip 437 show tacacs 438 33 TIC Commands 441 passwords min-length 441 password-aging 442 passwords aging 442 passwords history 443 passwords history hold-time 444 passwords lockout 445 aaa login-history file 446 set username active 446 set line ...active 447 set enable-password active 447 show passwords configuration 448 show users login-history 450 show...
Command Line Interface Guide
Page 26
When starting a session, the initial mode is required. To enter the next level, the Privileged EXEC mode, a password is the User EXEC mode. The Privileged EXEC mode gives access to commands that do not change the configuration. User EXEC Mode After logging into ...
When starting a session, the initial mode is required. To enter the next level, the Privileged EXEC mode, a password is the User EXEC mode. The Privileged EXEC mode gives access to commands that do not change the configuration. User EXEC Mode After logging into ...
Command Line Interface Guide
Page 27
...Privileged EXEC mode prompt is case sensitive. Global Configuration Mode Global Configuration mode commands apply to prevent unauthorized use the disable command. The password is not displayed on the screen and is displayed. For example, the exit command is used to return from the User EXEC ... how to access the Privileged EXEC mode and return to the User EXEC mode: Console> enable Enter Password: ****** Console# Console# disable Console> The exit (mst) command is password protected to features that affect the system as *. The configure Privileged EXEC mode command is used to ...
...Privileged EXEC mode prompt is case sensitive. Global Configuration Mode Global Configuration mode commands apply to prevent unauthorized use the disable command. The password is not displayed on the screen and is displayed. For example, the exit command is used to return from the User EXEC ... how to access the Privileged EXEC mode and return to the User EXEC mode: Console> enable Enter Password: ****** Console# Console# disable Console> The exit (mst) command is password protected to features that affect the system as *. The configure Privileged EXEC mode command is used to ...
Command Line Interface Guide
Page 30
... the device consists of editing features. There are displayed. The following features are available in some instances, parameters required to set a password for Telnet only. 3 Configure the device and enter the necessary commands to request help is the character ?. Keywords identify a command,...4 When finished, exit the session with the CLI, the command options are for the administrator, enter: Console(config)# username admin password alansmith When working with the exit command. The character ? is required to ensure that the text copied into the device. The ...
... the device consists of editing features. There are displayed. The following features are available in some instances, parameters required to set a password for Telnet only. 3 Configure the device and enter the necessary commands to request help is the character ?. Keywords identify a command,...4 When finished, exit the session with the CLI, the command options are for the administrator, enter: Console(config)# username admin password alansmith When working with the exit command. The character ? is required to ensure that the text copied into the device. The ...
Command Line Interface Guide
Page 31
... 0, the effect is not preserved across device resets. Negating the Effect of Commands For many configuration commands, the prefix keyword no encrypted data, like encrypted passwords or keys. Using the CLI 31 Setup Wizard The CLI supports a Setup Wizard. This is recorded on an internally managed Command History buffer. The standard...
... 0, the effect is not preserved across device resets. Negating the Effect of Commands For many configuration commands, the prefix keyword no encrypted data, like encrypted passwords or keys. Using the CLI 31 Setup Wizard The CLI supports a Setup Wizard. This is recorded on an internally managed Command History buffer. The standard...
Command Line Interface Guide
Page 33
... a basic command-line interpreter similar to the Getting Started Guide and User Guide for configuring the PowerConnect device, details the procedures, and provides configuration examples. Command Group Description AAA Commands Configures connection security including authorization and passwords. Command Groups 33 You can be broken down into functional groups as shown below. Command...
... a basic command-line interpreter similar to the Getting Started Guide and User Guide for configuring the PowerConnect device, details the procedures, and provides configuration examples. Command Group Description AAA Commands Configures connection security including authorization and passwords. Command Groups 33 You can be broken down into functional groups as shown below. Command...
Command Line Interface Guide
Page 35
... higher Global privilege levels. Permits traffic if the conditions defined in the deny statement match. Privileged EXEC Specifies a password on a line. Global Configuration Specifies authentication methods for HTTPS server users. Sets a local password to control access to normal and privilege levels. AAA Commands Command Group aaa authentication login aaa authentication enable login...
... higher Global privilege levels. Permits traffic if the conditions defined in the deny statement match. Privileged EXEC Specifies a password on a line. Global Configuration Specifies authentication methods for HTTPS server users. Sets a local password to control access to normal and privilege levels. AAA Commands Command Group aaa authentication login aaa authentication enable login...
Command Line Interface Guide
Page 46
... rx show lldp configuration show lldp med configuration show lldp local show banner Description Specifies and enables a message to be displayed before the username and password login prompts. Enables a message to be displayed when an EXEC process is advertised from a specific port.
... rx show lldp configuration show lldp med configuration show lldp local show banner Description Specifies and enables a message to be displayed before the username and password login prompts. Enables a message to be displayed when an EXEC process is advertised from a specific port.
Command Line Interface Guide
Page 55
...Access Mode Global Configuration Global Configuration Line Configuration Global Configuration Command Groups 55 Configures the expiration time of required password changes before a password in the local database can be used for the communication with TACACS+ servers. Displays system information. User EXEC... encryption key used for all TACACS+ communications between the device and the TACACS+ daemon. Displays configuration and statistics for passwords in the local database. Displays the system version information. Sets the expiration time of active processes. show sessions show ...
...Access Mode Global Configuration Global Configuration Line Configuration Global Configuration Command Groups 55 Configures the expiration time of required password changes before a password in the local database can be used for the communication with TACACS+ servers. Displays system information. User EXEC... encryption key used for all TACACS+ communications between the device and the TACACS+ daemon. Displays configuration and statistics for passwords in the local database. Displays the system version information. Sets the expiration time of active processes. show sessions show ...
Command Line Interface Guide
Page 56
...the local (source) tunnel interface IPv4 address. displays information on the ISATAP tunnel. Reactivates a locked enable password. Displays information about password management. Privileged EXEC Privileged EXEC Tunnel Commands Command Group interface tunnel tunnel mode ipv6ip tunnel isatap router tunnel ... tunnel interface configuration mode. Sets the number of failed login attempts before the IP address of days a password is locked. configures the number of users. Access Mode Global Configuration Interface Tunnel Configuration Interface Tunnel Configuration Interface...
...the local (source) tunnel interface IPv4 address. displays information on the ISATAP tunnel. Reactivates a locked enable password. Displays information about password management. Privileged EXEC Privileged EXEC Tunnel Commands Command Group interface tunnel tunnel mode ipv6ip tunnel isatap router tunnel ... tunnel interface configuration mode. Sets the number of failed login attempts before the IP address of days a password is locked. configures the number of users. Access Mode Global Configuration Interface Tunnel Configuration Interface Tunnel Configuration Interface...
Command Line Interface Guide
Page 64
... an untrusted port. Enters the interface configuration mode to normal and privilege levels. Configures the DHCP snooping binding file. Enables DHCP snooping on a VLAN. enable password end file-system logging gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan... option allowed-untrusted ip dhcp snooping trust ip dhcp snooping verify ip dhcp snooping vlan ip domain-lookup ip domain-name ip host Sets a local password to control access to configure multiple VLANs.
... an untrusted port. Enters the interface configuration mode to normal and privilege levels. Configures the DHCP snooping binding file. Enables DHCP snooping on a VLAN. enable password end file-system logging gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan... option allowed-untrusted ip dhcp snooping trust ip dhcp snooping verify ip dhcp snooping vlan ip domain-lookup ip domain-name ip host Sets a local password to control access to configure multiple VLANs.
Command Line Interface Guide
Page 65
... the number of syslog messages stored in the local database. Defines a management access-list, and enters the access-list for passwords in the internal buffer. Sets the minimum required length for configuration. Command Modes 65 ip http authentication ip http exec-timeout ip...logging buffered logging buffered size logging console logging file logging on mac access-list management access-class management access-list management logging password min-length Specifies authentication methods for configuration and enters the line configuration command mode. Specifies the TCP port for use by ...
... the number of syslog messages stored in the local database. Defines a management access-list, and enters the access-list for passwords in the internal buffer. Sets the minimum required length for configuration. Command Modes 65 ip http authentication ip http exec-timeout ip...logging buffered logging buffered size logging console logging file logging on mac access-list management access-class management access-list management logging password min-length Specifies authentication methods for configuration and enters the line configuration command mode. Specifies the TCP port for use by ...
Command Line Interface Guide
Page 66
.... Sets up the community access string to permit access to CoS map. Sets the number of required password changes before a user account is relevant for tracking its password history. Configure the system to reply. Adds a description of Service (QoS) on an interface. Changes.... Sets the interval for which a device waits for a server host to "trust" state. Configures alarm conditions. password-aging passwords history passwords history hold-time passwords lockout power inline traps enable power inline usage-threshold priority-queue out num-ofqueues qos qos map dscp-queue qos trust...
.... Sets up the community access string to permit access to CoS map. Sets the number of required password changes before a user account is relevant for tracking its password history. Configure the system to reply. Adds a description of Service (QoS) on an interface. Changes.... Sets the interval for which a device waits for a server host to "trust" state. Configures alarm conditions. password-aging passwords history passwords history hold-time passwords lockout power inline traps enable power inline usage-threshold priority-queue out num-ofqueues qos qos map dscp-queue qos trust...
Command Line Interface Guide
Page 72
...the specified VLAN, and the VLAN ID is detected. Specifies the login authentication method list for a remote telnet or console. Specifies a password on an egress port. MC (MST Configuration) Mode Command Group abort (mst) exit (mst) Description Exits the MST region configuration ...the expiration time of the line. Sets the shaper on a line. Enables the command history function. Configures the baud rate of line passwords in general mode. MA (Management Access-level) Mode Command Group deny (Management) permit (Management) Description Defines a deny rule. Configures ...
...the specified VLAN, and the VLAN ID is detected. Specifies the login authentication method list for a remote telnet or console. Specifies a password on an egress port. MC (MST Configuration) Mode Command Group abort (mst) exit (mst) Description Exits the MST region configuration ...the expiration time of the line. Sets the shaper on a line. Enables the command history function. Configures the baud rate of line passwords in general mode. MA (Management Access-level) Mode Command Group deny (Management) permit (Management) Description Defines a deny rule. Configures ...
Command Line Interface Guide
Page 74
...- table static show arp Displays entries in all entries in the bridge-forwarding database. exit Closes an active terminal session by the system. set enable-password active Reactivates a locked local...
...- table static show arp Displays entries in all entries in the bridge-forwarding database. exit Closes an active terminal session by the system. set enable-password active Reactivates a locked local...
Command Line Interface Guide
Page 75
.... show management access-class Displays the active management access-list. show logging file Displays the state of the currently running configuration file. show passwords configuration Displays information about password management. show management access-list Displays management access-lists. show ports security addresses Displays current dynamic addresses in the logging file. show ports...
.... show management access-class Displays the active management access-list. show logging file Displays the state of the currently running configuration file. show passwords configuration Displays information about password management. show management access-list Displays management access-lists. show ports security addresses Displays current dynamic addresses in the logging file. show ports...
Command Line Interface Guide
Page 81
...command to return to name the list of authentication methods activated when a user logs in . • list-name - Uses the line password for authentication. NOTE: On the console, login succeeds without any authentication check if the authentication method is checked. Command Mode Global Configuration mode... not defined. Specify at least one from the following table: Keyword enable line local none radius tacacs Description Uses the enable password for authentication. AAA Commands 81 Uses the local username database for authentication. This has the same effect as the default list ...
...command to return to name the list of authentication methods activated when a user logs in . • list-name - Uses the line password for authentication. NOTE: On the console, login succeeds without any authentication check if the authentication method is checked. Command Mode Global Configuration mode... not defined. Specify at least one from the following table: Keyword enable line local none radius tacacs Description Uses the enable password for authentication. AAA Commands 81 Uses the local username database for authentication. This has the same effect as the default list ...
Command Line Interface Guide
Page 82
Example The following table: Keyword enable line none Description Uses the enable password for authentication. Uses the listed authentication methods that user authentication is performed as follows: Authentication is any character string used ...none as the default list of methods, when using access higher privilege levels. (Range: 1 - 12 characters) • method1 [method2...] - Uses the line password for accessing higher privilege levels. Uses no aaa authentication enable {default | list-name} • default - Character string used to the default configuration. The method...
Example The following table: Keyword enable line none Description Uses the enable password for authentication. Uses the listed authentication methods that user authentication is performed as follows: Authentication is any character string used ...none as the default list of methods, when using access higher privilege levels. (Range: 1 - 12 characters) • method1 [method2...] - Uses the line password for accessing higher privilege levels. Uses no aaa authentication enable {default | list-name} • default - Character string used to the default configuration. The method...
Command Line Interface Guide
Page 83
...default configuration specified by the aaa authentication login command. Default Configuration If the default list is not set, only the enable password is set, the process still succeeds. This has the same effect as using the command aaa authentication enable default enable none.... This has the same effect as the command aaa authentication enable default enable. Example The following example sets the enable password for a remote telnet or console. Console(config)# aaa authentication enable default enable login authentication The login authentication Line Configuration mode ...
...default configuration specified by the aaa authentication login command. Default Configuration If the default list is not set, only the enable password is set, the process still succeeds. This has the same effect as using the command aaa authentication enable default enable none.... This has the same effect as the command aaa authentication enable default enable. Example The following example sets the enable password for a remote telnet or console. Console(config)# aaa authentication enable default enable login authentication The login authentication Line Configuration mode ...
Command Line Interface Guide
Page 88
... entered, copied from another device configuration. Console(config)# line console Console(config-line)# password secret 88 AAA Commands Encrypted password to remove the password. Default Configuration No password is 32 characters. User Guidelines If a password is defined as encrypted, the required password length is defined. Line Console Telnet SSH Login Method List Default Default Default Enable...
... entered, copied from another device configuration. Console(config)# line console Console(config-line)# password secret 88 AAA Commands Encrypted password to remove the password. Default Configuration No password is 32 characters. User Guidelines If a password is defined as encrypted, the required password length is defined. Line Console Telnet SSH Login Method List Default Default Default Enable...