Allied Telesis 2.6.1 manual Changing a Password, Choosing a Password

Page 17

Getting Started with the Command Line Interface (CLI)

17

To add a static route, enter the command:

ADD IP ROUTE=ipadd INTERFACE=interface NEXTHOP=ipadd [CIRCUIT=miox-circuit] [DLCI=dlci] [MASK=ipadd][METRIC=1..16] [METRIC1=1..16] [METRIC2=1..65535][POLICY=0..7] [PREFERENCE=0..65535]

To displays the entire routing table, including both static and dynamic routes, enter the command:

SHOW IP ROUTE

For more information about setting IP routes, see the Internet Protocol (IP) chapter in the AT-8800 Series Switch Software Reference.

Changing a Password

You should change this password to prevent unauthorised access to the switch.

Enter the command:

SET PASSWORD

The switch prompts you for the current password, for the new password, and for confirmation of the new password. The password can contain any printable characters, and must be at least a minimum length, by default six characters.

(To change the default minimum length, see the SET USER command in the Operations chapter, AT-8800 Series Switch Software Reference.)

Choosing a Password

All users, including managers, should take care in selecting passwords. Tools exist that enable hackers to guess or test many combinations of login names and passwords easily. The User Authentication Facility (UAF) provides some protection against such attacks by allowing the manager to set the number of consecutive login failures allowed and a lockout period when the limit is exceeded.

However, the best protection against password discovery is to select a good password and keep it secret. When choosing a password:

Do make it six or more characters in length. The UAF enforces a minimum password length, which the manager can change. The default is six characters.

Do include both alphabetic (a–z) and numeric (0–9) characters.

Do include both uppercase and lowercase characters. The passwords stored by the switch are case-sensitive, so “bgz4kal” and “Bgz4Kal” are different.

Do avoid words found in a dictionary, unless combined with other random alphabetic and numeric characters.

Do not use the login name, or the word “password” as the password.

Do not use your name, your mother’s name, your spouse’s name, your pet’s name, or the name of your favourite cologne, actor, food or song.

Software Release 2.6.1 C613-02039-00 REV A

Image 17
Contents AT-8800 Series Switch Page Contents AT-8800 Series Switch User Guide Operating the switchMaintenance and Troubleshooting Page Chapter Introducing the AT-8800 Series SwitchWhy Read this User Guide? AT-8800 Series Switch Documentation Set Where To Find More InformationIntroduction Features of the AT-8800 Series SwitchOnline Technical Support Software Features Management FeaturesSpecial Feature Licences Do if You Clear Flash Memory Completely on This Chapter Getting Started with the Command Line Interface CLIParameters for terminal communication Value Connecting a Terminal or PCTerminal Communication Parameters Getting Started with the Command Line Interface CLI Enter the password at the password promptLogging Assigning an IP AddressTo change the IP address for an interface, enter the command Setting RoutesTo add a static route, enter the command Changing a PasswordChoosing a Password Not available Using the CommandsAliases Getting Command Line HelpTo display the current help file, enter the command Setting System Parameters Enabling Special Feature LicencesGetting Started with the Graphical User Interface GUI Getting Started with the Graphical User Interface GUIAccessing the Switch via the GUI What is the GUI?Browser and PC Setup Supported browsers and operating systemsHttp Proxy Servers See Option 3 Connecting to an Installed Switch on Establishing a Connection to the SwitchSee Option 1 Configuring the Switch before Installation on See Option 2 Installing the Switch into the LAN onSee Http Proxy Servers on page 23 for more information Option 1 Configuring the Switch before InstallationUse this procedure if Default username is manager Option 2 Installing the Switch into the LANAt the login prompt, enter the user name and password Plug the switch into the LANAssign the vlan1 interface an IP address See Secure Access on page 29 for more informationFind out the IP address of the switch’s interface Option 3 Connecting to an Installed SwitchSelect a PC If necessary, bypass the Http proxy serverCreate a Security Officer user account Secure AccessTo create an RSA key pair, use the command Then enter the password for CIPHER, sbr4y3To enable system security, use the command System Status System StatusConfiguration Menu Using the GUI Navigation and FeaturesUsing Configuration Pages Quality of Service and traffic filtersAn example of a configuration page with a selection table Editable Fields Monitoring Menu Management MenuContext Sensitive GUI Help Diagnostics MenuChanging the Password Configuring Multiple Devices Saving Configuration Entered with the GUICombining GUI and CLI Configuration Then delete the GUI resource file, using the command To upgrade the GUILoad the new file onto the switch Upgrading the GUIPoint your web browser at the switch’s IP address TroubleshootingInstall the new file as the preferred GUI Deleting Temporary Files Accessing the Switch via the GUITraffic Flow Solutions SolutionIP Addresses and Dhcp Time and NTPLoading Software Page User Accounts and Privileges Using Scripts onSnmp and MIBs on A Security Officer prompt looks likeLogin Operating the switch Normal Mode and Security ModeTo display the current operating mode, enter the command Specific Parameters Storing Files in Flash Memory Remote ManagementExample output from the Show File command Using ScriptsStoring Multiple Scripts Saving the Switch’s ConfigurationFile extensions and file types Extension File type/function Loading and Uploading FilesFile Naming Conventions SPA Loading FilesExample Load a Patch File Using Http Setting Loader DefaultsTo load a patch file Configure the Loader Download the patch fileExample Upload a Configuration File Using Tftp Uploading Files From the SwitchMore information To upload a log fileUpgrading Switch Software Load the new release file onto the switch Example Upgrade to a New Software Release UsingTo upgrade to a new software release Make the release the default permanent release Enter the licence password for the software releaseEnter licence information for the release Test the releaseCheck that the file is successfully loaded Example Upgrade to a new patch fileTo upgrade to a new patch file Snmp and MIBs Using the Built-in EditorFor More About Operations and Facilities Where interface is the name of an interface, such as vlan11AT-8800 Series Switch User Guide Enabling and Disabling Switch Ports Switch PortsTo display information about switch ports, use the command To enable or disable a switch port, use the commandsSTP Autonegotiation of Port Speed and Duplex Mode Speed 10/100 Port TrunkingShow VLAN=ALL Packet Storm Protection Layer 2 SwitchingPort Mirroring Port security Virtual Local Area Networks VLANs Example output from the Show Switch Port Intrusion commandTpid Vlan TaggingFormat of user priority and Vlan data in an Ethernet frame Vlan Membership using Vlan Tags Member ports Vlan membership of example of a network using tagged portsVlan Membership of Untagged Packets Vlans with untagged ports Creating VLANsTo destroy a VLAN, use the command To add tagged ports to a VLAN, use the commandVlan Interaction with STPs and Trunk Groups Summary of Vlan tagging rulesProtected VLANs Ingress Rules Layer 2 Switching ProcessGeneric Vlan Registration Protocol Gvrp Learning Process Forwarding Process Layer 2 Filtering Example output from the Show Switch Filter command Egress Rules Quality of ServiceSpanning Tree Modes Spanning Tree Protocol STPRapid Spanning Tree port states State Meaning Spanning Tree and Rapid Spanning Tree Port StatesSpanning tree port states State Meaning Configuring STP SET STP=stpnameALL PRIORITY=0..65535 Example output from the Show STP command Do not occur Parameter Meaning Switch Max AgeTo display STP port information, use the command Example output from the Show STP Port command 94AT-8800 Series Switch User GuideTo show STP counters, use the command Receive 96AT-8800 Series Switch User GuideTransmit DiscardedIgmp Snooping Interfaces to Layer 3 ProtocolsDisable Igmpsnooping Group List Example output from the Show IP Igmp commandEvent TriggersDescription ParametersLayer Displays the interfaces enabled for IP routing Figure Then use either of the following commandsInternet Protocol IP IP MulticastingLayer 103 Routing Information Protocol RIPNovell IPX AppleTalk Example output from the Show IPX Circuit commandLayer 105 Resource Reservation Protocol RsvpPage Maintenance and Troubleshooting Switch startup messages How the Switch Starts UpSet system territory How to Avoid ProblemsWatch for software updates If you accidentally do this, you will need to What to Do if You Clear Flash Memory CompletelyGetting the Most Out of Technical Support What to Do if Passwords are LostWhat to Do if the PPP Link Disconnects Regularly Checking Connections Using Ping Resetting Switch DefaultsTo get debugging output, enter the command Maintenance and Troubleshooting 113To set Ping defaults, enter the command Troubleshooting IP ConfigurationsStop a Ping that is in progress, enter the command Telnet FailsYour switch is acting as a Dhcp client Troubleshooting Dhcp IP AddressesYour switch is acting as a Dhcp server Maintenance and Troubleshooting 115To check that the PPP link is active, enter the command Troubleshooting IPX ConfigurationsLocal Workstations Can Not Access Remote Servers No Routes are Visible to the Remote RouterCheck route tables Using Trace Route for IP TrafficTo halt a trace route that is in progress, enter the command