Users Guide

• ipv4-address/mask — Enter an IPv4 network address in dotted-decimal format (A.B.C.D), then a subnet mask in /prex-
length format (/x).
• ipv6-address/prefix-length — Enter an IPv6 address in x:x:x:x::x format with the prex length in /x format. The prex
range is /0 to /128.
• forwarding-router-address — Enter the next-hop IPv4/IPv6 address of a forwarding router that serves as a
management gateway to connect to a dierent subnet.
•
managementethernet — Send trac on the Management port for the congured IPv4/IPv6 subnet.
NOTE: Management routes are separate from IPv4 and IPv6 routes and are only used to manage the switch through the
Management port.
Congure management route
OS10(config)# management route 10.10.20.0/24 10.1.1.1
OS10(config)# management route 172.16.0.0/16 managementethernet
Congure user name and password
To set up remote access to OS10, create a user name and password after you congure the management port and default route. The user
role is a mandatory entry.
Enter the password in clear text. It is converted to SHA-512 format in the running conguration. A password must have at least nine
characters, including alphanumeric and special characters, and at least ve dierent characters from the password previously used for the
same username; for example:
OS10(config)# username admin password alpha404! role sysadmin
For backward compatibility with OS10 release 10.3.1E and earlier, passwords entered in MD-5, SHA-256, and SHA-512 format are supported.
To increase the required password strength, use the password-attributes command.
• Create a user name and password in CONFIGURATION mode.
username username password password role role
– username username — Enter a text string. A maximum of 32 alphanumeric characters; 1 character minimum.
– password password — Enter a text string. A maximum of 32 alphanumeric characters; 9 characters minimum.
– role role — Enter a user role:
◦ sysadmin — Full access to all commands in the system, exclusive access to commands that manipulate the le system, and
access to the system shell. A system administrator can create user IDs and user roles. The default privilege level is 15.
◦ secadmin — Full access to conguration commands that set security policy and system access, such as password strength,
AAA authorization, and cryptographic keys. A security administrator can display security information, such as cryptographic
keys, login statistics, and log information. The default privilege level is 15.
◦ netadmin — Full access to conguration commands that manage trac ow through the switch, such as routes, interfaces,
and ACLs. A network administrator cannot access conguration commands for security features or view security information.
The default privilege level is 15.
◦ netoperator — Access to EXEC mode to view the current conguration. A network operator cannot modify any
conguration setting on a switch. The default privilege level is 1.
NOTE
: To change a system administrator password, re-enter the command for the administrator's username with a new
password.
OS10(config)# username admin password beta@1 role sysadmin
Getting Started 51