Configuring Username and Password Security

Saving Security Credentials in a Config File

Password Command Options

The password command has the following options:

Syntax: [no] password <manager operator port-access all [user-name <name>] <hash-type> <password>>

Set or clear a local username/password for a given access level.

manager: configures access to the switch with manager-level privileges.

operator: configures access to the switch with operator-level privileges.

port-access:configures access to the switch through 802.1X authentication with operator-level privileges.

user-name <name>: the optional text string of the user name associated with the password.

all: configures all available types of access.

<hash-type>: specifies the type of algorithm (if any) used to hash the password. Valid values are plaintext or sha-1

<password>: the clear ASCII text string or SHA-1 hash of the password.

You can enter a manager, operator, or 802.1X port-access password in clear ASCII text or hashed format. However, manager and operator passwords are displayed and saved in a configuration file only in hashed format; port-access passwords are displayed and saved only as plain ASCII text.

After you enter the complete command syntax, the password is set. You are not prompted to enter the password a second time.

This command enhancement allows you to configure manager, operator, and 802.1X port-access passwords in only one step (instead of entering the password command and then being prompted twice to enter the actual password).

For more information about configuring local manager and operator passwords, refer to “Configuring Username and Password Security” on page 2-1in this guide.

For more information about configuring a port-access password for 802.1X client authentication, see “802.1X Port-Access Credentials” on page 2-15in this guide.

2-13