393
Verifying the configuration
After the device reboots, you can enter the system.
<Sysname>
# Display the current FIPS mode state.
<Sysname> display fips status
FIPS mode is disabled.
Exiting FIPS mode through manual reboot
Network requirements
A user has logged in to the device in FIPS mode through SSH with the username test and password
12345 zxcv b! @# $% ZX CVB .
Use the manual reboot method to exit FIPS mode.
Configuration procedure
# Disable FIPS mode.
[Sysname] undo fips mode enable
FIPS mode change requires a device reboot. Continue? [Y/N]:y
The system will create a new startup configuration file for non-FIPS mode, and then reboot
automatically. Continue? [Y/N]:n
Change the configuration to meet non-FIPS mode requirements, save the configuration to
the next-startup configuration file, and then reboot to enter non-FIPS mode.
# Set the authentication mode for VTY lines to scheme.
[Sysname] line vty 0 63
[Sysname-line-vty0-63] authentication-mode scheme
# Save the current configuration to the root directory of the storage medium, and specify it as the startup
configuration file.
[Sysname] save
The current configuration will be written to the device. Are you sure? [Y/N]:y
Please input the file name(*.cfg)[flash:/startup.cfg]
(To leave the existing filename unchanged, press the enter key):
flash:/startup.cfg exists, overwrite? [Y/N]:y
Validating file. Please wait...
Saved the current configuration to device successfully.
[Sysname] quit
# Delete the startup configuration file in binary format.
<Sysname> delete flash:/startup.mdb
Delete flash:/startup.mdb?[Y/N]:y
Deleting file flash:/startup.mdb...Done.
# Reboot the device.
<Sysname> reboot
Verifying the configuration
After the device reboots, enter the username test and password 12345 zxc v b!@ #$ %Z XC VB to enter
non-FIPS mode.
Press ENTER to get started.
To Next Page
Loading...
