Bay Networks 5390, Администрирование

Страница: 424 / 888

A15-4 893-741-B
Using Model 5390 Security
Administrative Password
The Model 5390 administrative password protects the administrative tools; the default
administrative password is the Model 5390 IP address. When the show annex command displays
the password as “<unset>”, use the default administrative password for:
• Access to superuser CLI commands.
• Access to ports locked with the CLI lock command.
• Access to a virtual CLI connection through local password protection (if the vcli_security
parameter is set to N).
Modifying the assigned administrative password enables password protection on access to Model
5390 servers through na and admin.
The administrative password validates access to the Model 5390 server through na only when
security is enabled and the password is defined. Also, it can be used as the VCLI password and to
override the password assigned with the CLI lock command.
Protecting the Superuser CLI
The Model 5390 administrative password is required for access to the superuser CLI. The default
password is the Model 5390 IP address. There are two ways to change the password:
• Using the superuser CLI passwd command.
• Changing the password parameter using na or admin.
Using either method, the new password takes effect immediately for access to the superuser CLI.
Reset the password to the Model 5390 IP address by either:
• Using na or admin to set the password parameter to the null string:
CAUTION:
The administrative password never displays. If you forget
the modified password, you can reset it only by erasing the Model 5390
nonvolatile memory using the ROM Monitor erase command, and
re-entering all parameters.As a safeguard against losing the unit’s cur-
rent configuration, use the na command write to save the Model 5390
port configurations; if necessary, you can restore these configurations
using the read command (for more details on using these commands,
see na Commands starting on page C1-1).