default-password

Function

The default-password command sets the password of an IPoX user.

The undo default-password command restores the default configuration.

By default, the password of an IPoX user is not configured.

This command is supported only on the NetEngine 8000 F1A.

Format

default-password [ template template-name ] { simple simple-password | cipher cipher-password | { option60 | vendor-class } [ cn | [ offset offset ] { length length | sub-option sub-option-code [ sub-offset sub-offset ] [ sub-length sub-length ] } ] [ md5-encrypt ] [ support hex ] | { option77 | user-class } }

undo default-password [ template template-name ]

Parameters

Parameter	Description	Value
template template-name	Specifies the name of the template used to determine the user password generation mode.	The value is a string of 1 to 31 case-sensitive characters, spaces not supported.
simple simple-password	Indicates that the user password is in simple text.	The value is a string of 1 to 128 characters. The password is case sensitive and cannot contain command line characters such as blanks and question mark. The new password is at least eight characters long and contains at least two of upper-case letters, lower-case letters, digits, and special characters. When configuring an authentication password, select the ciphertext mode because the password is saved in configuration files in simple text if you select simple text mode, which has a high risk. To ensure device security, change the password periodically.
cipher cipher-password	Indicates that the user password is in cipher text.Specifies a cipher-text password. The password is case sensitive and does not contain command line characters such as blanks and question mark.	The value is a character string. If the input string is not encrypted, the string can contain 1 to 16 characters. If the input string is encrypted, the string can contain 1 to 268 characters.
option60	The vendor-class of the user is option60.	-
vendor-class	Indicates that the system uses the vendor-class attribute as the user password.	-
cn	Uses the vendor-class attribute value in cn-telecom format to generate a user password.	-
offset offset	Configures the offset of a vendor-class option as the user password.	The value is an integer ranging from 0 to 255.
length length	Configures the field length of the vendor-class attribute as the user password.	The value is an integer ranging from 0 to 255.
sub-option sub-option-code	Configures the suboption code of the vendor-class attribute as the user password.	The value is an integer ranging from 0 to 255.
sub-offset sub-offset	Configures the offset of a vendor-class sub-option code as the user password.	The value is an integer ranging from 0 to 255.
sub-length sub-length	Configures the field length of a vendor-class sub-option as the user password.	The value is an integer ranging from 0 to 255.
md5-encrypt	Indicates that the system uses the MD5 algorithm to encrypt the user password.The encryption algorithm used for MD5 authentication poses security risks.	-
support	support.	-
hex	Indicates that the system parses the Option 60 based on the hexadecimal format.	-
option77	The user-class of the user is option77.	-
user-class	Indicates that the system uses the user-class attribute as the user password.	-

Views

AAA view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
aaa-access	write

Usage Guidelines

The differences between the cipher and simple keywords are as follows:

If cipher is specified, you can enter an encrypted password. If simple is specified, you can enter only the original (non-encrypted) password. The cipher keyword supports longer passwords because encrypted passwords are longer than non-encrypted ones.

If the cipher keyword is selected, the input encrypted password must be the same as the encrypted password generated by the system. You can enter a non-encrypted password and view the configuration file to obtain the encrypted password generated by the system. The encrypted password is complicated and errors may occur when you enter the encrypted password. Therefore, it is not recommended to enter the encrypted password.

If option60 or vendor-class is used as the user password, the system parses the Option 60 based on character strings by default. To allow the system to parse the Option 60 based on the hexadecimal format, specify the support hex keyword.

Example

# Configure the password for the IPoX user to test@123.

<HUAWEI> system-view
[~HUAWEI] aaa
[~HUAWEI-aaa] default-password cipher test@123