Riverstone Networks RS 2100 - Manual (Page 52)

4-12 Riverstone Networks RS 2100 Switch Router Getting Started Guide
Setting Up Passwords RS 2100 Initial Configuration
4.5 SETTING UP PASSWORDS
You can password-protect CLI access to the RS 2100 by setting up passwords for User mode access and Enable mode
access. Users who have a User password but not an Enable password can use only the commands available in User
mode. Users with an Enable password can use commands available in the Enable and Configure modes, as well as the
commands in User mode.
In addition, you can set up the RS 2100 for TACACS, TACACS+, and/or RADIUS authentication by a TACACS or
RADIUS server. Procedures for configuring the RS 2100 for TACACS and RADIUS can be found in the Riverstone
RS Switch Router User Guide.
To add password protection to the CLI, use the following procedure.
1. Ensure that you are in Enable mode by entering the
enable
command in the CLI.
2. Ensure that you are in Configure mode by entering the
configure
command in the CLI.
3. Type the following command for each password you want to set:
4. Use the
show
command to examine the commands you just entered.
5. Use the
save active
command to activate the commands.
6. Exit the Configuration mode, then use the
system show active-config
command to verify the
active changes.
Here is an example of the commands in the previous steps:
Notice that the passwords are shown in the Active configuration in an encrypted format. Passwords also appear this
way in the Startup configuration. To keep your passwords secure, the RS 2100 does not have a command for displaying
passwords in an unencrypted format.
Caution Test all new passwords before saving the active configuration to the Startup
configuration file.
system set password login|enable <string> |none
rs(config)# system set password login demo
rs(config)# system set password enable killer
rs(config)# save active
rs# exit
rs# system show active-config
Running system configuration:
!
! Last modified from Console on Mon Mar 27 12:12:19 2003
!
1 : system set name "rs"
2 : system set location "Houston, TX"
3 : system set contact "John Smith"
4 : system set hashed-password login jNIssH c976b667e681d03ccd5fc527f219351a
5 : system set hashed-password enable zcGzbO 5d1f73d2d478ceaa062a0b5e0168f46a