beautypg.com

9 login security, 10 configuring an ip address – Asante Technologies 35516 User Manual

Page 23

background image

- 23 -

7 Specifies a HIDDEN line password will follow

2.9 Login Security

Two methods are available on the IntraCore 35516 to configure an authentication query process for better login
security: the username command or the password and login commands.

2.9.1 The username Command

To establish a username-based authentication system, use the username command in global configuration mode.
This method is more effective because authentication is determined on a user basis. The configuration is done for
each line.

Router(config)# line console 0

Or

Router(config)# line vty vty-number

Router(config-line)# login user
Router# username name password password

The name argument can be a host name, server name, user ID, or command name. It is restricted to only one word.
Blank spaces and quotation marks are not allowed.

Optionally, an encrypted password can be used, preceded by a single-digit number that defines what type of
encryption is used. Currently defined encryption types are 0 (which means that the text immediately following is not
encrypted) and 7 (which means that the text is encrypted using an encryption algorithm).

2.9.2 The password and login Commands

Using the password and login commands is less effective because the password is configured for the port, not for
the user. Therefore, any user who knows the password can authenticate successfully.

This method enables user name and password checking at login time. Authentication is based on the user.

Note that login user is NOT set by default. The “root” user is the only default user; the password is the same as line
password.

2.10 Configuring an IP Address

The switch ships with the default IP address 192.168.0.1/24. Connect via the serial port in order to assign the switch
an IP address on your network.

The physical ports (or switchports) of the IC35516 are L2 ports, and cannot have an IP address assigned to them. By
default, each switchport belongs to VLAN 1, a virtual interface (veth1) that may be assigned a primary, as well as any
number of secondary, IP addresses. Use the following instructions to configure an IP address to the switch. The
network administrator may later assign primary IP addresses to any other VLAN created.

Follow the steps below to change the switch’s IP address.

1. Connect to the console and press Enter at the Password prompt, as described above.

2. The screen will display the user mode prompt, Router>.