Screenshot

Foundry FastIron LS

Recovering from a Lost Password

By default, the CLI does not require passwords. However, if someone has configured a password for the device but the password has been lost, you can regain super-user access to the device using the following procedure.

NOTE: Recovery from a lost password requires direct access to the serial port and a system reset.

To recover from a lost password:

  1. Start a CLI session over the serial interface to the Foundry device.

  2. Reboot the device.

  3. While the system is booting, before the initial system prompt appears, enter b to enter the boot monitor mode.

  4. Enter no password at the prompt. (You cannot abbreviate this command.)

  5. Enter boot system flash primary at the prompt. This command causes the device to bypass the system password check.

After the console prompt reappears, assign a new password.

Assigning Permanent Passwords

By default, the CLI is not protected by passwords. To secure CLI access, Foundry strongly recommends assigning passwords. See the Foundry Security Guide.

NOTE: You cannot assign a password using the Web management interface. You can assign passwords using IronView Network Manager if an enable password for a Super User has been configured on the device.

The CLI contains the following access levels:

• User EXEC – The level you enter when you first start a CLI session. At this level, you can view some system information but you cannot configure system or port parameters.

• Privileged EXEC – This level is also called the Enable level and can be secured by a password. You can perform tasks such as manage files on the flash module, save the system configuration to flash, and clear caches at this level.

• CONFIG – The configuration level. This level lets you configure the system’s IP address and configure switching and routing features. To access the CONFIG mode, you must already be logged into the Privileged level of the EXEC mode.

You can set the following levels of Enable passwords:

• Super User – Allows complete read-and-write access to the system. This is generally for system administrators and is the only password level that allows you to configure passwords.

NOTE: You must set a super user password before you can set other types of passwords.

• Port Configuration – Allows read-and-write access for specific ports but not for global (system-wide) parameters.

• Read Only – Allows access to the Privileged EXEC mode and CONFIG mode but only with read access.

To set passwords:

  1. At the opening CLI prompt, enter the following command to change to the Privileged level of the EXEC mode:
  FLS648 Switch> enable
  1. Access the CONFIG level of the CLI by entering the following command:
  FLS648 Switch# configure terminal

  FLS648 Switch(config)#
  1. Enter the following command to set the super-user password:
  FLS648 Switch(config)# enable super-user-password <text>

NOTE: You must set the super-user password before you can set other types of passwords.

  1. Enter the following commands to set the port configuration and read-only passwords:
  FLS648 Switch(config)# enable port-config-password <text>

  FLS648 Switch(config)# enable read-only-password <text>

Syntax: enable super-user-password | read-only-password | port-config-password Passwords can be up to 32 characters long.

Configuring IP Addresses

enable [<password>]
configure terminal
[no] ip address <ip-addr> <ip-mask>

or

[no] ip address <ip-addr>/<mask-bits>
ip default-gateway <ip-addr>

Sauvegarder la configuration

write memory

Effacer

Clean Unit - A unit that contains no startup flash configuration or run time configuration. To erase old configuration information, enter the erase startup-config command and reset the unit.

Displaying the Temperature on the FastIron LS

FLS648 Switch> show chassis

FLS648 Switch# show log

Web interface

  1. At the opening CLI prompt, enter the following enable command:
  FESX448> enable
  1. Access the configuration level of the CLI by entering the following command: 
  FESX448# configure terminal

  FESX448(config)#
  1. Add these two command lines to grant access for local users to Web Interface:
  FESX448(config)# aaa authentication web-server default local

  FESX448(config)# aaa authentication login default local
  1. Save the configuration changes to the device's flash memory:
  FESX448(config)# write mem