Users Guide

1. (Optional) Ensure that the DHCP client is disabled on the Management interface in INTERFACE mode.
no ip address dhcp
2. Configure a management route for the Management port in CONFIGURATION mode. Repeat the command to configure
multiple routes.
management route {ipv4-address/mask | ipv6-address/prefix-length}
{forwarding-router-address | managementethernet}
● ipv4-address/mask — Enter an IPv4 network address in dotted-decimal format (A.B.C.D), then a subnet mask
in /prefix-length format (/x).
●
ipv6-address/prefix-length — Enter an IPv6 address in x:x:x:x::x format with the prefix length in /x format. The
prefix range is /0 to /128.
● forwarding-router-address — Enter the next-hop IPv4/IPv6 address of a forwarding router that serves as a
management gateway to connect to a different subnet.
● managementethernet — Send traffic on the Management port for the configured IPv4/IPv6 subnet.
NOTE: Management routes are separate from IPv4 and IPv6 routes and are only used to manage the switch through the
Management port.
NOTE: Do not configure the same prefix in both the static route and management route. If the same prefix has to be used,
use management VRF.
NOTE: Management VRF is currently not supported on the MX7000 platforms.
Configure management route
OS10(config)# management route 10.10.20.0/24 10.1.1.1
OS10(config)# management route 172.16.0.0/16 managementethernet
Configure username and password
To set up remote access to OS10, create a username and password after you configure the management port and default route.
The user role is a mandatory entry.
Enter the password in clear text. It is converted to SHA-512 format in the running configuration. A password must have at least
nine characters, including alphanumeric and special characters, and at least five different characters from the password that is
previously used for the same username. For example:
OS10(config)# username admin password alpha404! role sysadmin
For backward compatibility with OS10 release 10.3.1E and earlier, passwords entered in MD-5, SHA-256, and SHA-512 format
are supported. To increase the required password strength, use the password-attributes command.
● Create a username and password in CONFIGURATION mode.
username username password password role role
○ username username — Enter a text string. A maximum of 32 alphanumeric characters; one character minimum.
○ password password — Enter a text string. A maximum of 32 alphanumeric characters; nine characters minimum.
○ role role — Enter a user role:
￭ sysadmin — Full access to all commands in the system, exclusive access to commands that manipulate the file
system, and access to the system shell. A system administrator can create user IDs and user roles. The default
privilege level is 15.
￭ secadmin — Full access to configuration commands that set security policy and system access, such as password
strength, AAA authorization, and cryptographic keys. A security administrator can display security information, such
as cryptographic keys, login statistics, and log information. The default privilege level is 15.
￭ netadmin — Full access to configuration commands that manage traffic flow through the switch, such as routes,
interfaces, and ACLs. A network administrator cannot access configuration commands for security features or view
security information. The default privilege level is 15.
￭ netoperator — Access to EXEC mode to view the current configuration with limited access. A network operator
cannot modify any configuration setting on a switch. The default privilege level is 1.
Getting Started with Dell EMC SmartFabric OS10
59