display aaa default-password

Function

The display aaa default-password command displays the password generation mode of an IPoX user.

This command is supported only on the NetEngine 8000 F1A.

Format

display aaa default-password [ template template-name | global ]

Parameters

Parameter Description Value
template template-name

Displays the password generation mode configured on a specified template.

The value is a string of 1 to 31 case-sensitive characters, spaces not supported.

global

Displays the global password generation mode of an IPoX user.

-

Views

All views

Default Level

3: Management level

Task Name and Operations

Task Name Operations
aaa-access read

Usage Guidelines

Usage Scenario

After running the default-password command to configure the password generation mode of an IPoX user, you can run the display aaa default-password command to check the configuration.

If you run the display aaa default-password command with no parameter specified, the global password generation mode and password generation modes of all password templates are displayed. You can run the display aaa default-password command to view the password generation mode of an IPoX user configured on a specified template, or run the display aaa default-password global to view the global password generation mode of an IPoX user.

Precautions

In VS mode, this command is supported only by the admin VS.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display the pure user name generation mode of a specified template named test.
<HUAWEI> display aaa default-password template test
  Index: 1
  Template name:test
  Password: vendor-class: cn-format:yes,offset:no,length:no,sub-option:no,sub-offset:no,sub-length:no,md5-encrypt:no,support hex:no
# Display the password generation mode of an IPoX user configured in the system view.
<HUAWEI> display aaa default-password global
 No global password exist.
Table 1 Description of the display aaa default-password command output
Item Description
Template name

Name of a password template.

Index

Index of a password template.

Password

Global user password.

  • If the parameter cipher or simple is configured, the system displays ******. It indicates the configured password.
  • If the vendor-class attribute is configured as the password, the system displays cn-format:XX1, offset:XX2, length:XX3, sub-option:XX4, sub-offset:XX5, sub-length:XX6, md5-encrypt:XX7. If cn is configured, XX1 refers to yes. Otherwise, XX1 refers to no. If md5-encrypt is configured, XX7 refers to yes. Otherwise, XX7 refers to no. XX2, XX3, XX4, XX5 and XX6 display the actual values of offset, length, sub-option, sub-offset and sub-length. If any of them is not configured, no is displayed.
  • If the user-class attribute is configured as the password, the system displays user-class.

The encryption algorithm used for MD5 authentication poses security risks.

Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >