User guide

Logging Into the Switch Enabling the FIPS mode
OmniSwitch AOS Release 8 Switch Management Guide May 2014 page 1-21
This user-id and password can be used to access an OmniSwitch in secure mode when FIPS is enabled on
the switch.
6 Access the OmniSwitch from the SSH/SFTP/SSL/SNMPv3 clients with encryption AES using the
user credentials defined.
NoteA FIPS supported client such as Absolute Telnet can be used to access the OmniSwitch.
7 Use the show user command to view the SNMP level configured for the user.
-> show user = snmpadmin
User name = snmpadmin,
Password expiration = 12/22/2014 11:01 (30 days from now),
Password allow to be modified date = 03/25/2014 10:59 (3 days from now),
Account lockout = Yes (Automatically unlocked after 19 minute(s)from now),
Password bad attempts = 3,
Read Only for domains = None,
Read/Write for domains = Admin System Physical Layer2 Services policy Security ,
Read/Write for families = ip rip ospf bgp vrrp ip-routing ipx ipmr ipms ,
Snmp allowed = YES,
Snmp authentication = SHA,
Snmp encryption = AES
Console-Only = Disabled
A secure session of the user “snmpadmin” is established between the client and the OmniSwitch in FIPS
enabled mode.
8 FIPS mode can be disabled using the system fips admin-state disable command. When the FIPS
mode is disabled, all other existing cryptographic algorithms will be supported.