Allied Telesis AT-9000/28, User Manual

Page: 1097 / 1278

AT-9000 Switch Command Line User’s Guide
Section XI: Management Security 1097
Activating Command Mode Restriction and Creating the Special
Password
Command mode restriction is a security feature. It requires that managers
who have the privilege level 15 enter a special password to manage the
switch. The switch prompts for the special password when the ENABLE
command is used to move to the Privileged Exec mode from the User
Exec mode. The prompt is shown in Figure 175 on page 1093. Managers
who do not know the password or have the privilege level 1 are restricted
to the User Exec mode.
The command for activating command mode restriction and creating or
changing the password is the ENABLE PASSWORD command in the
Global Configuration mode. The switch can have only one special
password. Here is the format of the command:
enable password [8]
password
The PASSWORD parameter specifies the special password. You can
enter the password in plaintext or encrypted. A plaintext password is case-
sensitive and can have up to 16 alphanumeric characters including special
characters. Spaces are not allowed. An encrypted password must be
preceded by the number “8” and a space.
This example activates command mode restriction and creates the special
password “Day89lane:”
awplus> enable
awplus# configure terminal
awplus(config)# enable password Day89lane
This example activates command mode restriction and specifies the
password as “ship247,” in encrypted form:
awplus> enable
awplus# configure terminal
awplus(config)# enable password 8 85076026566ed1dd84a709c0f
dd1fa9f
To confirm the configuration, display the running configuration with
“SHOW RUNNING-CONFIG” on page 132.