Setup Guide
• 8 — input the password that is already encrypted using sha256–based encryption method.
• password: Enter the password string for the user.
• dynamic-salt: Generates an additional random input to password encryption process whenever the password is congured.
• privilege level: Assign a privilege levels to the user. The range is from 0 to 15.
• role role-name: Assign a role name for the user.
Dell EMC Networking OS encrypts type 5 secret and type 7 password based on dynamic-salt option such that the encrypted
password is dierent when an user is congured with the same password.
NOTE:
dynamic-salt option is shown only with secret and password options.
In
dynamic-salt conguration, the length of type 5 secret and type 7 password is 32 and 16 characters more compared to the
secret and password length without dynamic-salt conguration. An error message appears if the username command reaches the
maximum length, which is 256 characters.
The dynamic-salt support for the user conguration is added in REST API. For more information on REST support, see Dell EMC
Networking Open Automation guide.
Conguring the Enable Password
Access EXEC Privilege mode using the enable command. EXEC Privilege mode is unrestricted by default. Congure a password as a
basic security measure.
There are three types of enable passwords:
• enable password is stored in the running/startup conguration using a DES encryption method.
• enable secret is stored in the running/startup conguration using MD5 encryption method.
• enable sha256-password is stored in the running/startup conguration using sha256-based encryption method (PBKDF2).
Dell EMC Networking recommends using the enable sha256-password password.
To congure an enable password, use the following command.
• Create a password to access EXEC Privilege mode.
CONFIGURATION mode
enable [password | secret | sha256-password] [level level] [encryption-type] password
• level: is the privilege level, is 15 by default, and is not required.
• encryption-type: species how you input the password, is 0 by default, and is not required.
• 0 is to input the password in clear text.
• 5 is to input a password that is already encrypted using MD5 encryption method. Obtain the encrypted password from the
conguration le of another device.
• 7 is to input a password that is already encrypted using DES encryption method. Obtain the encrypted password from the
conguration le of another device.
• 8 is to input a password that is already encrypted using sha256-based encryption method. Obtain the encrypted password from
the conguration le of another device.
Conguration File Management
Files can be stored on and accessed from various storage media. Rename, delete, and copy les on the system from EXEC Privilege mode.
Getting Started
49