4000 Router Series Security Configuration Guide

344

[Sysname] fips mode enable

FIPS mode change requires a device reboot. Continue? [Y/N]:y

Reboot the device automatically? [Y/N]:y

The system will create a new startup configuration file for FIPS mode. After you set the

Enter username(1-55 characters):root

Enter password(15-63 characters):

Confirm password:

Waiting for reboot... After reboot, the device will enter FIPS mode.

Verifying the configuration

After the device reboots, enter the username root and the password 12345zxcvb!@#$%ZXCVB. The

system prompts you to configure a new password. After you configure the new password, the device

enters FIPS mode.

Press ENTER to get started.

Password:

First login or password reset. For security reason, you need to change your password. Please

enter your password.

old password:

new password:

confirm:

Updating user information. Please wait ... ...

…

# Display the current FIPS mode state.

<Sysname> display fips status

FIPS mode is enabled.

# Display the default configuration file.

<Sysname> more fips-startup.cfg

password-control enable

local-user root class manage

service-type terminal

authorization-attribute user-role network-admin

fips mode enable

return

Entering FIPS mode through manual reboot

Network requirements

Use the manual reboot method to enter FIPS mode, and use a console/AUX/Async port to log in to the

device in FIPS mode.