Accessing the CLI task list
52
CopperLink CL2300 User Manual
7
• Accessing the CLI
Password encryption
Unencrypted passwords can be stolen by hackers using protocol analyzers to scan packets or by examining the
configuration file—to protect against that type of theft, Trinity encrypts passwords by default. Encryption pre-
vents the password from being readable in the configuration file.
•
Plain text
•
Encrypted text (for example, the password mypassword always appears in encrypted form as
HUAvCYeILW-
Zz3hQvS0IEpQ== encrypted
when doing a
show
command)
The command
show running-config
always displays the passwords in encrypted format. To encrypt a pass-
word, enter the password in plain format and retrieve the encrypted format from the running-config or store it
permanently into the startup-config (with the command
copy running-config startup-config
).
Factory preset superuser account
Trinity contains a factory preset superuser account with the name
admin
(no passwords). When a new supe-
ruser account has been defined in the configuration, the preset admin account will delete after reboot. You can
create more than one superuser account, but there has to be at least one superuser account defined. If, for some
reason, the last superuser account is deleted, the factory preset administration account with the name
admin
and an empty password is automatically recreated.
Configuring operators, administrators, and superusers
Creating an operator account
Operators do not have the privileges to run the
enable
command and therefore cannot modify the system con-
figuration. Operators can view partial system information.
Creating a new operator account is described in the following procedure:
Mode
: Operator execution
Step
Command
Purpose
1
device>
enable
Enters administration execution mode
2
device#
configure
Enters configuration mode
3
device(cfg)#
operator
name
password
password
Creates a new operator account
name
and
password
password
4
copy running-config startup-config
Saves the change made to the running con-
figuration of the Patton device, so that it will
be used following a reload
Example:
Create an operator account
The following example shows how to add a new operator account with a login name
support
and a matching
password of
s4DF&qw
. The changed configuration is then saved.