May 2012
Your First Login Session
9
Unlocking Session Types
Security is a key feature on OmniSwitch 6450 switches. As a
result, when you access the switch for the first time, you must
use a
direct console port connection
. All other session types
(Telnet, FTP, WebView, SNMP, etc.) are “locked out” until
they are manually unlocked by the administrator.
The CLI command used to unlock session types is
aaa authentication
.
Note.
When you unlock session types, you are granting
switch access to non-local sessions (e.g., Telnet). As a
result, users who know the correct user login and pass-
word will have remote access to the switch. For more
information on switch security, refer to the “Managing
Switch User Accounts” chapter of your
Switch Manage-
ment Guide.
Unlocking All Session Types
To unlock all session types, enter the following command
syntax at the CLI prompt:
-> aaa authentication default local
The command above tells the OmniSwitch to check the local
database to authenticate all session types.
Unlocking Specified Session Types
You can also unlock session types on a one-by-one basis. For
example, to unlock Telnet sessions only, enter the following
command:
-> aaa authentication telnet local
To unlock WebView (HTTP) sessions only, enter the follow-
ing command:
-> aaa authentication http local
You cannot specify more than one session type in a single
command line. However, you can still unlock multiple session
types by using the
aaa authentication
command in succes-
sion. For example:
-> aaa authentication http local
-> aaa authentication telnet local
-> aaa authentication ftp local
