Administrator Guide

management route ip-address/mask gateway
• ip-address: the network address in dotted-decimal format (A.B.C.D).
• mask: a subnet mask in /prefix-length format (/ xx).
• gateway: the next hop for network traffic originating from the management port.
Configuring a Username and Password
To access the system remotely, configure a system username and password.
To configure a system username and password, use the following command.
• Configure a username and password to access the system remotely.
CONFIGURATION mode
username name [access-class access-list-name] [nopassword | {password | secret | sha256–
password} [encryption-type] password [dynamic-salt]] [privilege level] [role role-name]
• name: Enter a text string upto 63 characters long.
• access-class access-list-name: Enter the name of a configured IP ACL.
• nopassword: Allows you to configure an user without the password.
• password: Allows you to configure an user with a password.
• secret: Specify a secret string for an user.
• sha256–password: Uses sha256–based encryption method for password.
• encryption-type: Enter the encryption type for securing an user password. There are four encryption types.
• 0 — input the password in clear text.
• 5 — input the password that is already encrypted using MD5 encryption method.
• 7 — input the password that is already encrypted using DES encryption method.
• 8 — input the password that is already encrypted using sha256–based encryption method.
• password: Enter the password string for the user.
• dynamic-salt: Generates an additional random input to password encryption process whenever the password is configured.
• privilege level: Assign a privilege levels to the user. The range is from 0 to 15.
• role role-name: Assign a role name for the user.
Dell EMC Networking OS encrypts type 5 secret and type 7 password based on dynamic-salt option such that the encrypted
password is different when an user is configured with the same password.
NOTE:
dynamic-salt option is shown only with secret and password options.
In dynamic-salt configuration, the length of type 5 secret and type 7 password is 32 and 16 characters more compared to the
secret and password length without dynamic-salt configuration. An error message appears if the
username command reaches the
maximum length, which is 256 characters.
The dynamic-salt support for the user configuration is added in REST API. For more information on REST support, see Dell EMC
Networking Open Automation guide.
Configuring the Enable Password
Access EXEC Privilege mode using the enable command. EXEC Privilege mode is unrestricted by default. Configure a password as a
basic security measure.
There are three types of enable passwords:
• enable password is stored in the running/startup configuration using a DES encryption method.
• enable secret is stored in the running/startup configuration using MD5 encryption method.
• enable sha256-password is stored in the running/startup configuration using sha256-based encryption method (PBKDF2).
Dell EMC Networking recommends using the enable sha256-password password.
To configure an enable password, use the following command.
• Create a password to access EXEC Privilege mode.
CONFIGURATION mode
Getting Started
45