HP E3800 Series, Руководство по обеспечению безопасности доступа

Страница: 63 / 732

2-13
Configuring Username and Password Security
Saving Security Credentials in a Config File
Password Command Options
The
password
command has the following options:
You can enter a manager, operator, or 802.1X port-access password in clear
ASCII text or hashed format. However, manager and operator passwords are
displayed and saved in a configuration file only in hashed format; port-access
passwords are displayed and saved only as plain ASCII text.
After you enter the complete command syntax, the password is set. You are
not prompted to enter the password a second time.
This command enhancement allows you to configure manager, operator, and
802.1X port-access passwords in only one step (instead of entering the
password
command and then being prompted twice to enter the actual
password).
■ For more information about configuring local manager and operator
passwords, refer to “Configuring Username and Password Security” on
page 2-1 in this guide.
■ For more information about configuring a port-access password for
802.1X client authentication, see “802.1X Port-Access Credentials” on
page 2-15 in this guide.
Syntax: [no] password <manager | operator | port-access> [user-name < name >]
< hash-type > < password >
Set or clear a local username/password for a given access level.
manager:
configures access to the switch with manager-level
privileges.
operator:
configures access to the switch with operator-level
privileges.
port-access:
configures access to the switch through 802.1X
authentication with operator-level privileges.
user-name < name >
: the optional text string of the user name
associated with the password.
<
hash-type
>: specifies the type of algorithm (if any) used to
hash the password. Valid values are
plaintext
or
sha-1
<
password
>: the clear ASCII text string or SHA-1 hash of the
password.