Setup Guide

Locking Access to GRUB Interface
You can congure the Dell EMC Networking OS to lock the GRUB interface using a password. If you congure a GRUB password, the
system prompts for the password when you try to access the GRUB interface.
CAUTION: After conguring the boot access password, save it to a secure location. If you forget it, you will not be able to access
the options in the startup menu. If you forget both the boot access password and the enable password, the system may become
inaccessible.
To lock the GRUB interface using a password, use the following procedure:
• Congure a GRUB password.
CONFIGURATION mode
boot-access password [encryption-type] boot-password
Enter an encryption type for the boot password.
• 0 directs the system to store the password as clear text.
• 7 directs the system to store the password with a dynamic salt.
When you congure the root access password, ensure that your password meets the following criteria:
• A minimum of eight characters in length
• A minimum of one lower case letter (a to z)
• A minimum of one upper case letter (A to Z)
• A minimum of one numeric character (0 to 9)
• A minimum of one special character including a space (" !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~")
If you enable the boot access password, the system prompts for a password when you access the GRUB interface.
DellEMC(conf)#boot-access password 7 Hg$7^5HMoiY%
***********************************************************************
* Warning - boot-access password will enable password protection in *
* GRUB. Keep it safe. Forgetting this password and the CLI password *
* may result in switch becoming inaccessible. *
***********************************************************************
Do you want to configure boot-access password? Proceed [yes/no]:yes
DellEMC(conf)#
Enabling User Lockout for Failed Login Attempts
You can congure the system to lock out local users for a specic period for unsuccessful login attempts.
This feature enhances the security of the switch by locking out the local user account if there are more number of unsuccessful login
attempts than what is congured using the max-retry parameter. To enable the user lock out feature, use the following commands:
Enable the user lockout feature.
CONFIGURATION
password-attributes user-lockout-period minutes
Enter the duration in minutes.
758
Security