Operator`s manual
Table Of Contents
- RS 8000/8600 Getting Started Guide
- Notices
- Table of Contents
- 1 About This Guide
- 2 Introduction
- 3 Hardware Installation
- 3.1 Safety Considerations
- 3.2 Hardware Specifications
- 3.3 Installing the Hardware
- 3.3.1 Verifying Your Shipment
- 3.3.2 Installing the Chassis
- 3.3.3 Installing an AC Power Supply
- 3.3.4 Installing a DC Power Supply
- 3.3.5 Installing the Control Module
- 3.3.6 Installing the Switching Fabric Module (RS8600 only)
- 3.3.7 Installing Line Cards
- 3.3.8 Installing GBIC Modules into Line Cards
- 3.3.9 Installing ATM Physical Media Cards (PHYs)
- 3.3.10 Multi-rate WAN Line Card and WICs
- 3.3.11 SRP Line Cards and Bridge Mate Module
- 3.3.12 Installing SFP Transceivers
- 3.3.13 Attaching the Network Cables to Line Cards
- 4 Initial Configuration
- 4.1 Powering on the RS8000/8600
- 4.2 Starting the Command Line Interface
- 4.3 Configuration Changes and Saving the Configuration File
- 4.4 Setting the Basic System Information
- 4.5 Setting Up Passwords
- 4.6 Setting Up SNMP
- 4.7 Setting the DNS Domain Name and Address
- 4.8 Setting the SYSLOG Parameters
- 4.9 Using Redundant Control Modules
- 5 Managing Software
- Appendix A Troubleshooting
- Appendix B International SaFety Information
- Index
4-12 Riverstone Networks RS 8000/8600 Switch Router Getting Started Guide
Setting Up Passwords Initial Configuration
4.5 SETTING UP PASSWORDS
You can password-protect CLI access to the RS 8000/8600 by setting up passwords for User mode access, Enable
mode access, and Diag mode access. Users who have a User password but not an Enable password can use only the
commands available in User mode. Users with an Enable password can use commands available in the Enable and
Configure modes, as well as the commands in User mode.
In addition, you can set up the RS 8000/8600 for TACACS, TACACS+, and/or RADIUS authentication by a TACACS
or RADIUS server. Procedures for configuring the router for TACACS and RADIUS can be found in the Riverstone
Networks RS Switch Router User Guide.
To add password protection to the CLI, use the following procedure.
1.
Ensure that you are in Enable mode by entering the
enable
command in the CLI.
2.
Ensure that you are in Configure mode by entering the
configure
command in the CLI.
3.
Type the following command for each password you want to set:
4.
Use the
show
command to examine the commands you just entered.
5.
Use the
save active
command to activate the commands.
6.
Exit the Configuration mode, then use the
system show active-config
command to verify the
active changes.
Here is an example:
Notice that the passwords are shown in the Active configuration in an encrypted format. Passwords also appear this
way in the Startup configuration. To keep your passwords secure, the router does not have a command for displaying
passwords in an unencrypted format.
system set password login|enable|diag
<string>
|none
rs(config)#
system set password login demo
rs(config)#
system set password enable killer
rs(config)#
system set password diag trouble
rs(config)#
save active
rs#
exit
rs#
system show active-config
Running system configuration:
!
! Last modified from Console on Mon Mar 27 12:12:19 2003
!
1 : system set name "rs"
2 : system set location "Houston, TX"
3 : system set contact "John Smith"
4 : system set hashed-password login jNIssH c976b667e681d03ccd5fc527f219351a
5 : system set hashed-password enable zcGzbO 5d1f73d2d478ceaa062a0b5e0168f46a
6 : system set hashed-password diag jdfbyp 67e681d3d2d478cf21935a0b5e016f2193