Access Security Guide K/KA/KB.15.15

Additional password commands
Table 58 Password Commands Affected by Enhanced Secure Mode
LocationCommand in Enhanced Secure ModeCommand in Standard Secure Mode
Management and Configuration Guidesnmpv3 user <user-name> auth [md5
| sha][priv]
snmpv3 user <user-name> auth [md5
| sha] <password> [priv [des | aes]
]
aaa port-access supplicant <port-list>
identity <user-name> secret <port-list>
aaa port-access supplicant <port-list>
identity <user-name> secret
[<port-list>]
page (page 74)aaa port-access mac-based passwordaaa port-access mac-based password
<password>
Advanced Traffic Configuration Guidestack member <switch-num>
mac-address <mac-addr> password]
stack member <switch-num>
mac-address <mac-addr>[password
<password>]
Secret keys
When the switch security is in enhanced secure mode, CLI commands that take a secret key as a
parameter have the echo of the secret typing replaced with asterisks, unless the secret is not used
for authorizing access to switch access. The input for <key-string> is prompted for interactively:
Enter key-string: ********
Re-enter key-string: ********
Or
Enter authentication-key: ********
Re-enter authentication-key: ********
Table 59 Secret key commands
LocationCommand in Enhanced Secure ModeCommand in Standard Secure Mode
key-chain <chain-name> key
<1-255> key-string <key-str>
key-chain <chain-name> key
<1-255> key-string <key-str>
page “Configuring the switch
global RADIUS parameters”
(page 150)
radius-server [host <ip-addr>]
key
radius-server [host<ip-addr>]
key <key-str>
page (page 125)tacacs-server [host <ip-addr>]
key
tacacs-server [host <ip-addr>]
key <key-str>
Management and Configuration
Guide
sntp authentication key-id
<1-4294967295>
sntp authentication key-id
<1-4294967295>
authentication-mode md5
key-value [trusted]
authentication-mode md5
key-value <key-str> [trusted]
Multicast and Routing Guiderouter ospf area <area-id>
virtual-link <ip-addr>
authentication-key
router ospf area <area-id>
virtual-link <ip-addr>
authentication-key <key-str>
Multicast and Routing Guidevlan <vid> ip rip [<ip-addr>]
authentication-key
vlan <vid> ip rip [<ip-addr>]
authentication-key
Multicast and Routing Guidevlan <vid> ip ospf [<ip-addr>]
authentication-key
vlan <vid> ip ospf [<ip-addr>]
authentication-key <key-str>
Management and Configuration
Guide
autorun encryption-keyautorun encryption-key
<key-str>
page “Enabling
Encrypt-Credentials” (page 36)
encrypt-credentials
[pre-shared-key <hex |
plaintext>]
encrypt-credentials
[pre-shared-key <hex |
plaintext> <key-str>]
Configuring 501