October 2006
Your First Login Session
25
Assigning IP Addresses to Switches in a
Stacked Configuration
It is important that
all switches
in a stacked configuration have
the same assigned IP address. This way, if a failover should
occur (i.e., another switch in the stack assumes the primary
management role), users can still log in to the stack via remote
login sessions such as Telnet, FTP, and WebView.
The IP assigned to the stack’s primary switch is dynamically
assigned to all other switches in the stack whenever either of
the following actions occurs:
•
The
entire stack
is rebooted and an automatic
/flash
synchronization occurs
•
The
copy flash-synchro
command is entered at the CLI
prompt on the stack’s
primary switch
You are not required to manually assign the IP address to each
switch in the stack.
Avoiding Duplicate IP Addresses in the Network.
If any stacking cable (other than the optional redundant
stacking cable) is disconnected while the stack is in opera-
tion, duplicate IP addresses will exist on the network.
Therefore, if a switch is to be pulled from a stack, it is
recommended that the switch is given a unique IP address
via the (
vlan router ip
command) before being
disconnected.
Unlocking Session Types
Security is a key feature on OmniSwitch 6800 Series switches.
As a result, when you access the switch for the first time, you
must use a
direct console port connection
. All other session
types (Telnet, FTP, WebView, SNMP, etc.) are “locked out”
until they are manually unlocked by the user.
The CLI command used to unlock session types is
aaa authentication
.
Note.
When you unlock session types, you are granting
switch access to non-local sessions (e.g., Telnet). As a
result, users who know the correct user login and pass-
word will have remote access to the switch. For more
information on switch security, refer to the “Managing
Switch User Accounts” chapter of your
OmniSwitch 6800/
6850/9000 Switch Management Guide.
Unlocking All Session Types
To unlock all session types, enter the following command
syntax at the CLI prompt:
-> aaa authentication default local
