R0106-HP MSR Router Series Security Configuration Guide(V7)

444
Verifying the configuration
After the device reboots, enter the username test and the password 12345zxcvb!@#$%ZXCVB. The
system prompts you to configure a new password. After you configure the new password, the device
enters FIPS mode. The new password must be different from the previous password. It must include at least
15 characters, and contain uppercase and lowercase letters, digits, and special characters. For more
information about the requirements for the password, see the system output.
Press ENTER to get started.
login: test
Password:
First login or password reset. For security reason, you need to change your pass
word. Please enter your password.
old password:
new password:
confirm:
Updating user information. Please wait ... ...
…
<Sysname>
# Display the current FIPS mode state.
<Sysname> display fips status
FIPS mode is enabled.
Exiting FIPS mode through automatic reboot
Network requirements
A user has logged in to the device in FIPS mode through a console/AUX/Async port.
Use the automatic reboot method to exit FIPS mode.
Configuration procedure
# Disable FIPS mode.
[Sysname] undo fips mode enable
FIPS mode change requires a device reboot. Continue? [Y/N]:y
The system will create a new startup configuration file for non-FIPS mode and then reboot
automatically. Continue? [Y/N]:y
Waiting for reboot... After reboot, the device will enter non-FIPS mode.
Verifying the configuration
After the device reboots, you can enter the system.
<Sysname>
# Display the current FIPS mode state.
<Sysname> display fips status
FIPS mode is disabled.
Exiting FIPS mode through manual reboot
Network requirements
A user has logged in to the device in FIPS mode through SSH with the username test and password
12345 zxcv b! @# $% ZX CVB .