Avaya Inc. – External Distribution
3. Local password protection
3.1 CLI/WEB Password Protection
By default, on the ERS 2500, ERS 4500, or ERS 5000 series switch, serial port and telnet/web
access is allowed without any password protection.
The following command displays the various password options available.
ERS-Stackable(config)# cli password ?
read-only Modify read-only password
read-write Modify read-write password
serial Enable/disable serial port password.
stack Modify stack passwords.
switch Modify switch (stand-alone) passwords.
telnet Enable/disable telnet and web password.
The following command displays the various telnet access options. The choices are local user
name & password protection, none, radius, or tacacs.
ERS-Stackable(config)# cli password <switch|stack> telnet ?
local Use local password.
none Disable password.
radius Use RADIUS password authentication.
tacacs Use TACACS+ AAA services
The following command displays the various local serial port access options. The choices are
local user name & password protection, none, radius, or tacacs
ERS-Stackable(config)# cli password serial ?
local Use local password.
none Disable password.
radius Use RADIUS password authentication.
tacacs Use TACACS+ AAA services
To add a user name, enter the following command when password security is disabled – please
see next section regarding Password Security.
ERS-Stackable(config)# username <user name> <password>
Enabling telnet password protection, either local user/password or against a RADIUS
server, also applies to WEB access.
For the standard image, the default password for the read-only user is user and secure
for the read-write user. For the secure software image, the default password for the
read-only user is userpasswd and securepswd for the read-write user. The default read-
only user name is RO while the default read-write user name is RW. Please note, these
user names and passwords are only applicable once you enable local password
security.
To Next Page
Loading...
