beautypg.com

Setting passwords, Setting a telnet password, Suppressing telnet connection rejection messages – Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) User Manual

Page 34

background image

16

Multi-Service IronWare Security Configuration Guide

53-1003035-02

Setting passwords

1

Setting passwords

Passwords can be used to secure the following access methods:

Telnet access can be secured by setting a Telnet password. Refer to

“Setting a Telnet

password”

.

Access to the Privileged EXEC and CONFIG levels of the CLI can be secured by setting
passwords for management privilege levels. Refer to

“Setting passwords for management

privilege levels”

.

This section also provides procedures for enhancing management privilege levels, recovering from
a lost password, and disabling password encryption.

NOTE

You also can configure up to 16 user accounts consisting of a user name and password, and assign
each user account a management privilege level. Refer to

“Setting up local user accounts”

.

Setting a Telnet password

By default, the device does not require a user name or password when you log in to the CLI using
Telnet.

To set the password “letmein” for Telnet access to the CLI, enter the following command at the
global CONFIG level.

Brocade(config)# enable telnet password letmein

Syntax: [no] enable telnet password string

NOTE

If enable strict-password-enforcement is enabled, when a user is logged in and is attempting to
change their own user password, the following prompt is displayed: Enter old password. After
validating the old password, the following prompt is displayed: Enter new password.

Suppressing Telnet connection rejection messages

By default, if a Brocade device denies Telnet management access to the device, the software
sends a message to the denied Telnet client. You can optionally suppress the rejection message.
When you enable the option, a denied Telnet client does not receive a message from the Brocade
device. Instead, the denied client simply does not gain access.

To suppress the connection rejection message sent by the device to a denied Telnet client, enter
the following command at the global CONFIG level of the CLI.

Brocade(config)# telnet server suppress-reject-message

Syntax: [no] telnet server suppress-reject-message