beautypg.com

Local user account configuration, Local user accounts with no passwords, Local user accounts with unencrypted passwords – Brocade FastIron Ethernet Switch Security Configuration Guide User Manual

Page 40

background image

Local user account configuration

You can create accounts for local users with or without passwords. Accounts with passwords can have
encrypted or unencrypted passwords.

You can assign privilege levels to local user accounts, but on a new device, you must create a local
user account that has a Super User privilege before you can create accounts with other privilege
levels.

NOTE
You must grant Super User level privilege to at least one account before you add accounts with other
privilege levels. You need the Super User account to make further administrative changes.

Local user accounts with no passwords

To create a user account without a password, enter the following command at the global CONFIG
level of the CLI.

device(config)#username wonka nopassword

Syntax: [no] username user-string privilege privilege-level nopassword

Local user accounts with unencrypted passwords

If you want to use unencrypted passwords for local user accounts, enter a command such as the
following at the global CONFIG level of the CLI.

device(config)#username wonka password willy

If password masking is enabled, press the [Enter] key before entering the password.

device(config)#username wonka password

Enter Password: *******

The above commands add a local user account with the user name "wonka" and the password. This
account has the Super User privilege level; this user has full access to all configuration and display
features.

device(config)#username waldo privilege 5 password whereis

This command adds a user account for user name "waldo", password "whereis", with the Read Only
privilege level. Waldo can look for information but cannot make configuration changes.

Syntax: [no] usernameuser-string privilege privilege-level [ password | nopassword ] password-
string

You can enter up to 48 characters for user-string .

The privilege privilege-level parameter specifies the privilege level for the account. You can specify
one of the following:

0 - Super User level (full read-write access)
4 - Port Configuration level
5 - Read Only level

The default privilege level is 0 . If you want to assign Super User level access to the account, you can
enter the command without privilege 0 , as shown in the command example above.

Local user account configuration

40

FastIron Ethernet Switch Security Configuration Guide

53-1003088-03