Lenovo Flex System Fabric CN4093, Application Manual

Page: 97 / 634

© Copyright Lenovo 2017 Chapter 4: Securing Administration
97
Protected Mode
Protected Mode settings allow the switch administrator to block the management
module from making configuration changes that affect switch operation. The
switch retains control over those functions.
The following management module functions are disabled when Protected Mode
is turned on:
 External Ports: Enabled/Disabled
 External management over all ports: Enabled/Disabled
 Restore Factory Defaults
 New Static IP Configuration
In this release, configuration of the functions listed above are restricted to the local
switch when you turn Protected Mode on. In future releases, individual control
over each function may be added.
Note:
Before you turn Protected Mode on, make sure that external management
(Telnet) access to one of the switch’s IP interfaces is enabled.
Use the following command to turn Protected Mode on:
CN 4093(config)# protected-mode enable
If you lose access to the switch through the external ports, use the console port to
connect directly to the switch, and configure an IP interface with Telnet access.
Stacking Mode
When the switch is in stacking mode, Protected Mode is automatically enabled for
three of the four Protected Mode functions, and the following module functions
are disabled:
 External Ports (Enabled)
 External management over all ports (Enabled)
 Restore Factory Defaults
Stack members and stack Master can get their IP addresses from the advanced
management module (AMM). Stack can be managed using external ports or using
the AMM management port.
If required, the functionality of new static IP configuration can also be disabled by
turning off Protected Mode (
CN 4093(config)# no protected-mode
enable
) and turning it back on (
CN 4093(config)# protected-mode
enable
).