HP HP ProCurve Series 6600, Руководство по обеспечению безопасности доступа

Страница: 85 / 778

2-31
Configuring Username and Password Security
Encrypting Credentials in the Configuration File
Figure 2-11. Example of Enabling encrypt-credentials with Caution Message
Figure 2-12. Example of Creating a pre-shared-key in Plaintext
Figure 2-13. Example of Creating a pre-shared-key in Hex
Displaying the State of Encrypt-Credentials
To display whether
encrypt-credentials
is enabled or disabled, enter the
show
encrypt-credentials
command. This command is available only from the man-
ager context.
HP Switch(config)# encrypt-credentials
**** CAUTION ****
This will encrypt all passwords and authentication keys.
The encrypted credentials will not be understood by older software versions.
The resulting config file cannot be used by older software versions.
It may also break some of your existing user scripts.
Before proceeding, please save a copy of your current config file, and associate
the current config file with the older software version saved in flash memory.
See “Best Practices for Software Updates” in the Release Notes.
A config file with ‘encrypt-credentials’ may prevent previous software versions
from booting. It may be necessary to reset the switch to factory defaults. To
prevent this, remove the encrypt-credentials command or use an older config file.
Save config and continue [y/n]? y
HP Switch(config)# encrypt-credentials pre-shared-key plaintext SecretKey1
Save config and continue [y/n]? y
HP Switch(config)# encrypt-credentials pre-shared-key hex
1234567891234567891234567891234567891234567891234567891234567891
Save config and continue [y/n]? y