Users Guide

Security Commands 993
• encrypted — Encrypted password to be entered, copied from another
switch configuration.
Default Configuration
This command has no default configuration.
Command Mode
AAA IAS User Configuration
User Guidelines
IAS user accounts are distinct from user (administrator) accounts. IAS
accounts give access to network resources (via 802.1X or MAB), whereas user
accounts give administrative access to the switch.
Example
console#configure
console(config)#aaa ias-user username client-1
console(config-ias-user)#password client123
console(config-ias-user)#no password
The following is an example of adding a MAB Client to the IAS user database
with MAC address f81f.3ccc.b157. Be sure to enter the password in upper case
letters or authentication will fail with an “MD5 Validation Failure” as the
password hash does not match.
console#configure
console(config)#aaa ias-user username f81f3cccb157
console(config-ias-user)#password F81F3CCCB157
console(config-ias-user)#exit
console(config)#
password (User Exec)
Use the password command in User Exec mode to allow a currently logged in
user to change the user password without having read/write privileges. This
command should be used after the password has aged. The user is prompted
to enter the old password and the new password. The special characters
allowed in the password include ! # $ % & ‘ ( ) * + , - . / : ; < = > @
[ \ ] ^ _ ` { | } ~. User names can contain blanks if the name is
surrounded by double quotes.