Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 1850 / 2354

user AAA Commands
page 28-20 OmniSwitch CLI Reference Guide March 2011
md5+des Specifies that the MD5 authentication algorithm and the DES encryp-
tion standard should be used for authenticating and encrypting SNMP
PDU for the user.
console-only enable Enables console only access for the user admin .
console-only disable Disables console only access for the user admin .
Defaults
By default, if a user is created without indicating the read and write privileges and SNMP access, the user
will be given privileges based on the
default user account . The default user account may be modified.
Platforms Supported
OmniSwitch 10K
Usage Guidelines
•
At least one user with SHA/MD5 authentication and/or DES encryption must be configured on the
switch for SNMPv3 communication with OmniVista.
•
Note that the exclamation point (!) is not a valid password character. In addition, specifying an asterisk
(*) as one or more characters in a password is allowed as long as every character is not an asterisk. For
example,
password ** 123456** is allowed; password ******** is not allowed.
•
A password expiration for the user’s current password may be configured with the expiration option.
However, if the password is changed, or the global password expiration setting is configured with the
user password-expiration command, the user’s password expiration will be configured with the
global expiration setting.
•
When modifying a user’s SNMP access, the user password must be re-entered (or a new one config-
ured). This is required because the hash algorithm used to save the password in the switch depends on
the SNMP authentication level.
•
At initial startup, the default user on the switch is admin with a password of switch . The switch will
not recreate this user at any successive startup as long as there exists at least one user defined with
write access to all commands. (Note that if password expiration is configured for the
admin user, or
configured globally through the user password-expiration command, when the admin user’s pass-
word expires, the admin user will have access only through the console port.)
•
New users or updated user settings are saved automatically .
Examples
-> user techpubs password writer_pass read-only config
-> no user techpubs
Release History
Release 7.1.1; command was introduced.