RTD Embedded Technologies, Inc.
|
www.rtd.com
49
LAN35MH08HR & LAN35ME08HR User’s Manual
6.7
Common Configuration Task: Setting a Password with ICLI
By default, the switch has no password set for the admin user account. One of the first things that should be done is to set a sufficiently complex
password on the admin account, as a basic security precaution. This is especially important if the switch is to be configured with an IP address
and managed over the network. (An unauthorized login to the switch can compromise the entire network.)
The following demonstrates how to set the admin password to MustBeChanged.
Replace the text MustBeChanged with your own desired
password. If multiple LAN35Mx08 boards are present in the stack, be sure to set a password on all of them.
To remove a password use
the command
username admin privilege 15 password unencrypted none
.
#
configure terminal<Enter>
(config)#
username admin privilege 15 password unencrypted MustBeChanged<Enter>
(config)#
exit<Enter>
#
copy running-config startup-config<Enter>
Building configuration...
% Saving 2454 bytes to flash:startup-config
#
Note that the term unencrypted in the above command specifies how the password is to be passed on the command line. It
does not
specify
how the password is stored in the configuration file.
The LAN35Mx08 always stores passwords in an encrypted format, as demonstrated
in the abbreviated listing below (note the last line):
#
show running-config<Enter>
Building configuration...
banner exec "TIP: If Backspace does not work, use Ctrl-H for Backspace."
banner login "If you require support, please contact RTD Embedded Technologies,
Inc."
logging level notice
username admin privilege 15 password encrypted TXVzdEJlQ2hhbmdlZA==
The above commands demonstrate the most basic method of setting a password. Use The CEServices software supports a variety of
authentication options, including:
•
Multiple user accounts with privilege levels from 0 to 15 (full admin is level 15)
•
enable secret
to provide a secondary password to elevate a non-privileged account
•
Authentication from a remote user database using RADIUS or (requires an additional server to provide authentication)
Configuring most of these methods can be determined by studying the provided command reference files and the Microsemi/Vitesse application
note. If you required assistance, contact RTD techsupport.
6.8
Common Configuration Task: Setting a Static IP Address with ICLI
By default, the LAN35Mx08 does not have an IP address configured. The LAN35Mx08 is capable of serving as an Ethernet switch without an IP
address. However, to manage the switch via the network (using SSH or the Web GUI), an IP address must be configured.
As explained previously section, all physical interfaces on the switch are Layer 2. So, an IP addresses must be assigned to a VLAN interface,
and then one or more physical interfaces may be assigned to that VLAN. VLAN 1 already exists as part of the default configuration. All physical
interfaces are a member of VLAN 1 unless configured otherwise. For a small network, the most expedient way to set an IP address for the switch
is to set an IP address on the VLAN 1 interface.
The commands below demonstrate how to configure the managed switch for an IP address of 192.168.0.5, using VLAN 1. This example
assumes a /24 subnet mask (255.255.255.0). It is up to the user to determine the appropriate IP address scheme for their network. If multiple
LAN35Mx08 boards are present in the stack, they should each be configured with a unique IP address.
#
configure terminal<Enter>
(config)#
interface vlan 1<Enter>
(config-if-vlan)#
ip address 192.168.0.5 255.255.255.0<Enter>
(config-if-vlan)#
end<Enter>
#
