Brocade BigIron RX Series Configuration Guide - Manual (Page 151)

BigIron RX Series Configuration Guide 73
53-1002484-04
Configuring SSL security for the Web Management Interface
3
NOTE
The enable strict-password-enforcement command must be enabled before this command is
configured. Otherwise, the following message is displayed:
"Password expire time is enabled
only if strict-password-enforcement is set".
Issue the show user command to display the password expiration date, as shown in bold in the
following.
Syntax: [no] username <name> enable
Creating an encrypted all-numeric password
To create a password that is made up of all numeric values, use the command "username
<user-string> privilege <privilege-level> password <password-string>."
BigIron RX# username customer1 create-password 9999
Syntax: [no] username <user-string> create-password <password-string>
The create-password option allows you to create a password with a numeric value in the
<password-string> variable. The generated password will be encrypted. The show running-config
command displays the password as shown.
BigIron RX(config)# show running config
username sandy ......
BigIron RX# show user
Username Password Encrypt Priv Status Expire Time
=================================================================================
sandy $1$Gz...uX/$wQ44fVGtsqbKWkQknzAZ6. enabled 0 enabled 20 days
Configuring SSL security for the Web Management Interface
When enabled, the SSL protocol uses digital certificates and public-private key pairs to establish a
secure connection to the device. Digital certificates serve to prove the identity of a connecting
client, and public-private key pairs provide a means to encrypt data sent between the device and
the client.
Configuring SSL for the Web Management Interface consists of the following tasks:
• Enabling the SSL server on the device
• Importing an RSA certificate and private key file from a client (optional)
• Generating a certificate
BigIron RX(config)# user sandy enable
BigIron RX(config)# show user
Username Password Encrypt Priv Status Expire Time
==============================================================================
sandy $1$Gz...uX/$wQ44fVGtsqbKWkQknzAZ6. enabled 0 enabled 90 days