Manuals / Nortel Networks / Computer Equipment / Network Router

Nortel Networks 8600 manual Hsecure mode, Default passwords and community strings

Models: 8600

1 136

Download 136 pages 14.91 Kb

Page 20

20Commissioning fundamentals

hsecure mode

The Nortel Ethernet Routing Switch 8600 supports a flag called high secure (hsecure). hsecure introduces the following behaviors for the password: 10-character enforcement, aging time, limitation of failed logon attempts, and a protection mechanism to filter certain IP addresses.

After you enable the hsecure flag, the software enforces the 10-character rule for all passwords. After you upgrade from a previous release, if the password does not contain at least 10 characters, you must change your password to the mandatory character length. This password must contain a minimum of two uppercase characters, two lowercase characters, two numbers, and two special characters.

Default passwords and community strings

If the switch boots in hsecure mode as a default factory setting, and you have not configured a password, the default passwords are changed to respect this rule. The following table describes the default passwords.

Table 3

Default setting passwords

User ID	Default password

rwa	rwarwarrwar

rw	rwrwrwrwrw

ro	rororororo

l3	l3l3l3l3l3

l2	l2l2l2l2l2

l1	l1l1l1l1l1

l4admin	l4adminl4a

slbadmin	slbadminsl

oper	operoperop

l4oper	l4operl4op

slboper	slboperslb

ssladmin	ssladminss

The following table describes the default community strings.

Table 4

Default community strings

	User ID		New community string

	ro		publiconly

	l1		privateonly

	l2		privateonly


		Nortel Ethernet Routing Switch 8600
		Commissioning
		NN46205-319 01.01 Standard
		30 May 2008

Copyright © 2008 Nortel Networks

Image 20

Nortel Networks 8600 manual Hsecure mode, Default passwords and community strings

Contents

Commissioning Legal Notice Contents Initial steps using the Nncli Common procedures using Device Manager 127 Copyright 2008 Nortel Networks Software license Nortel Networks Inc. software license agreementGeneral Nortel Networks Inc. software license agreement Software license Features New in this releaseOther changes Document changesNew in this release Introduction NavigationIntroduction Commissioning fundamentals System connectionsTerminal connection Modem connectionPPP modem connection Data terminal Ready DTR Ground GND Data set readyRequest to send Clear to sendPPP configuration topology System logon Hsecure mode Default passwords and community stringsSetup utility Aging enforcementFiltering mechanism PrivateonlyCommissioning fundamentals Setup utility example one Setup utility example two Secure and nonsecure protocols Management port Password encryptionFTP and Tftp Disabled Static IP entry for the OOB network management interface OOB network management port default IP flowchart Web management Device ManagerCommissioning fundamentals Commissioning Commissioning tasksCommissioning navigation Initial steps using Device Manager Initial commissioning proceduresEditing system information Initial commissioning navigationVariable definitions SaveBootConfig-saves the current Boot configurationSaveRuntimeConfig-saves the current Run-time configurationSaveSlaveBootConfig-saves Current boot configuration toFile to enable features Conﬁguring the date and timeChanging passwords Use the data in the following table to configure the CLI tab Variable Value Initial steps using the CLI Prerequisites to initial stepsInitial steps using the CLI Job aid Roadmap of initial CLI commands Initial steps using the CLI Connecting a terminal Prerequisites Connecting a modemProcedure steps Mtu bytes my-ip ipaddr peer-ip ipaddr pppfile file Baud rate 8databits truefalse mode asciislippppSlip-compression truefalse slip-rx-compression truefalse Variable definitions Truefalse Procedure job aid PPP fileSlip-rx-compression Defaultroute Ipcpmaxconfigure valueAsyncmap value Chapfile fileLcpmaxconfigure value LoginIpcpmaxfailure value Ipcpmaxterminate valuePappasswd password Mtu valueNetmask value NoaccPaprestart value Papusername namePassivemode ProxyarpChapfile mychap Papfile mypap Conﬁguring the switch with the setup utilityProcedure job aid setup utility prompts Configuring the switch with the setup utility Initial steps using the CLI FTP Initial steps using the CLI Vlan Conﬁguring system identiﬁcation Enabledisable Mgmt-virtual-ip ipaddr/mask SendAuthenticationTrapSmlt-on-single-cp enabledisa Ble timer value Enabledisable EnablesMm.n.d/hhmmMMddhhmm Conﬁguring the time zoneDst-end Dhhmm Conﬁguring the dateDst-start Mm.n.d/hhmmMMd Cpu-slot Config bootconfig master cpu-slotSpecifying the primary SF/CPU Enabledisable enables or Access-level access levelAccess level is an integer Logon or password Password is the passwordLogon and/or password applies Routing SwitchConfigures the minimum length For passwords in high-secureConfigures the operator logon to Previous passwords the switchResetting passwords Initial steps using the Nncli Initial steps using the Nncli Boot config master cpu-slot Job aid Roadmap of initial Nncli commandsClock set MMddyyyyhhmmss Install Show boot config master Commissioning Log enablemaxfilesize CommunityForce GroupBoot config sio modem 8databitsbaud rate mode asciislipppp Boot config sio modem slip-compression slip-rx-comp ression Boot config sio modem restartConfigures the communication mode for Serial port. The default is American StandardIf you are configuring the modem port, you can Configure the port to use either the Slip orEnables or disables Transmission Control For Slip mode. The default is false. UseNo operator to remove this configuration. To Enables or disables TCP/IP header compressionDefaultroute Lcpmaxterminate value Novjccomp You must log on to the Privileged Exec mode in the Nncli Procedure job aid setup utility prompts Configuring the switch with the setup utility Initial steps using the Nncli FTP Initial steps using the Nncli Enables agent conformance mode Agent-conformanceAuthentication-trap BootstrapForce-iphdr-sender Force-trap-senderExample of configuring system identification To configure this option to the default Value, use the default operator withConfigures the starting date of DST Dst-end Mm.n.d/hhmmMMddhGreenwich. To configure this option to Default value, use the default operatorWith the command Clock set MMddyyyyhhmmssChanging passwords Access level word Changes the default lockout time after Three invalid attempts. ConfiguresConfigures the minimum length for Passwords in high-secure modeRemote connection conﬁguration using Device Manager Remote connection conﬁguration proceduresRemote connection configuration navigation Assigning an IP address to the management port Assigning static routes to the management interfaceVariable definitions Conﬁguring Snmp settings for Device Manager access Variable definitions Click System Flags Select the EnableWebServer box Enabling the Web management interfaceRemote connection configuration using Device Manager Remote connection conﬁguration using the CLI Remote connection configuration using the CLI Job aid Roadmap of remote connection CLI commands Config bootconfig net mgmt ip ipaddr/mask cpu-slot value Config sys set mgmt-virtual-ip ipaddr/maskNetaddr/mask Config bootconfig net mgmt route add netaddr/mask gatewayGateway Config bootconfig flags access-service truefalse Enabling remote access servicesConfig bootconfig net mgmt route add 11.0.0.0/255.0.0.0 Flags access-service truefalse Access-serviceConﬁguring the remote host logon Ftp-debugTftp-timeout Tftp-debugTftp-hash Tftp-rexmitRemote connection configuration using the CLI Remote connection conﬁguration using the Nncli Remote connection configuration using the Nncli Ask gateway Sys mgmt-virtual-ip ipaddr/mask Job aid Roadmap of remote connection Nncli commandsMask Boot config net mgmt ip ipaddr mask value Web-serverBoot config net mgmt route netaddr/mask gateway Ipaddr maskEnabling remote access services Remote-access service types to Configuration. To configure this optionSpecifies one of the following Use the no operator to remove thisDef-display-rows Help-tftpManagement console screen. The default is disabled Use the no operator to later remove this configurationTftp-timeout Commissioning veriﬁcation Commissioning veriﬁcation navigationPinging an IP device Count valueUsing Telnet to log on to the device Accessing the switch through the Web interfaceAccessing the switch through the Web interface Commissioning verification Saving the conﬁguration Common procedures using Device ManagerCommon procedure navigation Common procedures using Device Manager Common procedures using the CLI BackupMode clinncli FileSavetype StandbyCommon procedures using the Nncli Standby word Backup wordFile word Index Time zone commands Page Commissioning