4-12 Riverstone Networks RS 3000/3100/3200 Switch Router Getting Started Guide
Setting Up Passwords Initial Configuration
4.5 SETTING UP PASSWORDS
You can password-protect CLI access to the RS 3000, RS 3100 or RS 3200, by setting up passwords for User mode
access, Enable mode access, and Diag mode access. Users who have a User password but not an Enable password can
use only the commands available in User mode. Users with an Enable password can use commands available in the
Enable and Configure modes, as well as the commands in User mode.
In addition, you can set up the RS 3000, RS 3100 or RS 3200, for TACACS, TACACS+, and/or RADIUS
authentication by a TACACS or RADIUS server. Procedures for configuring the RS 3000, RS 3100 or RS 3200, for
TACACS and RADIUS can be found in the Riverstone RS Switch Router User Guide.
To add password protection to the CLI, use the following procedure.
1. Ensure that you are in Enable mode by entering the enable command in the CLI.
2. Ensure that you are in Configure mode by entering the configure command in the CLI.
3. Type the following command for each password you want to set:
4. Use the show command to examine the commands you just entered.
5. Use the save active command to activate the commands.
6. Exit the Configuration mode, then use the system show active-config command to verify the
active changes.
Here is an example of the commands in the previous steps:
Notice that the passwords are shown in the Active configuration in an encrypted format. Passwords also appear this
way in the Startup configuration. To keep your passwords secure, the RS 3000, RS 3100 or RS 3200 does not have a
command for displaying passwords in an unencrypted format.
system set password login|enable|diag <string>|none
rs(config)# system set password login demo
rs(config)# system set password enable killer
rs(config)# system set password diag trouble
rs(config)# save active
rs# exit
rs# system show active-config
Running system configuration:
!
! Last modified from Console on Mon Mar 27 12:12:19 2003
!
1 : system set name "rs"
2 : system set location "Houston, TX"
3 : system set contact "John Smith"
4 : system set hashed-password login jNIssH c976b667e681d03ccd5fc527f219351a
5 : system set hashed-password enable zcGzbO 5d1f73d2d478ceaa062a0b5e0168f46a
6 : system set hashed-password diag jdfbyp 67e681d3d2d478cf21935a0b5e016f2193