Specifications

Administrative AAA Configuration Scenarios
3-8 Configuring AAA for Administrative and Local Access
(Forinformationaboutconfiguringusersandusergroups,see“AddingandClearingLocalUsers
forAdministrativeAccess”onpage 3‐8.)
Setting User Passwords
Likeusernames,passwordsarecase‐sensitive.Tomakepasswordssecure,makesuretheycontain
uppercaseandlowercaselettersandnumbers.Enterasys Networksrecommendsthatallusers
createpasswordsthatarememorabletothemselves,difficultforotherstoguess,andnotsubjectto
adictionaryattack.
Userpasswordsareautomatically encryptedwhenentered
inthelocaldatabase.However,the
encryptionisnotstrong.Itisdesignedonlytodiscouragesomeonelookingoveryourshoulder
frommemorizingyourpasswordasyoudisplaytheconfiguration.Tomaintainsecurity,MSS
displaysonlytheencryptedformofthepasswordinshowcommands.
Adding and Clearing Local Users for Administrative Access
UsernamesandpasswordscanbestoredlocallyontheRoamAboutSwitch.Enterasys Networks
recommendsthatyouenforceconsoleauthenticationaftertheinitialconfigurationtoprevent
anyonewithunauthorizedaccesstotheconsolefromloggingin.Thelocaldatabaseonthe
RoamAboutSwitchisthesimplestwaytostoreuserinformationinan
Enterasys Networks
system.
Toconfigureauserinthelocaldatabase,typethefollowingcommand:
set user username password [encrypted] password
Example
ToconfigureuserJoewiththepasswordspRin9inthelocaldatabaseontheRBT‐8100switch,type
thefollowingcommand:
RBT-8100# set user Joe password spRin9
success: User Joe created
Theencryptedoption indicatesthatthepasswordstringyouareenteringistheencryptedformof
thepassword.UsethisoptiononlyifyoudonotwantMSStoencryptthepasswordforyou.
Toclearauserfromthelocaldatabase,typethefollowingcommand:
clear user username
Note: Although MSS allows you to configure a user password for the special “last-resort” guest user,
the password has no effect. Last-resort users can never access a RoamAbout Switch in
administrative mode and never require a password.