Brocade TurboIron 24X Series Configuration Guide - Manual (Page 118)

84 Brocade TurboIron 24X Series Configuration Guide
53-1003053-01
Configuring TACACS/TACACS+ security
Syntax: [no] username <user-string> [privilege <privilege-level>] create-password
<password-string>
You can enter up to 48 characters for <user-string>. This string can be alphanumeric or
all-numeric.
The privilege parameter specifies the privilege level for the account. You can specify one of the
following:
• 0 – Super User level (full read-write access)
• 4 – Port Configuration level
• 5 – Read Only level
Enter up to 48 alphanumeric characters for <password-string>.
Changing a local user password
To change a local user password for an existing local user account, enter a command such as the
following at the global CONFIG level of the CLI.
NOTE
You must be logged on with Super User access (privilege level 0) to change user passwords.
TurboIron(config)#username wonka password willy
If password masking is enabled, enter the username, press the [Enter] key, then enter the
password.
TurboIron(config)#username wonka password
Enter Password: willy
The above commands change wonka's user name password to “willy”.
Syntax: [no] username <user-string> password <password-string>
Enter up to 48 characters for <user-string>.
The <password-string> parameter is the user password. The password can be up to 48 characters
and must differ from the current password and two previously configured passwords.
When a password is changed, a message such as the following is sent to the Syslog.
SYSLOG: <14>Jan 1 00:00:00 10.44.9.11 Security: Password has been changed for user
tester from console session.
The message includes the name of the user whose password was changed and during which
session type, such as Console, Telnet, SSH, Web, SNMP, or others, the password was changed.
Configuring TACACS/TACACS+ security
You can use the security protocol Terminal Access Controller Access Control System (TACACS) or
TACACS+ to authenticate the following kinds of access to the device:
• Telnet access
• SSH access
• Console access