switching and routing features. To access the CONFIG mode, you must already be logged into the Privileged
level of the EXEC mode.
By default, there are no CLI passwords. To secure CLI access, you must assign passwords.
NOTE: You must use the CLI to assign a password. You cannot assign a password using the Web management
interface or an SNMP network management application.
You can set the following levels of Enable passwords:
Super User – Allows complete read-and-write access to the system. This is generally for system
administrators and is the only password level that allows you to configure passwords. You must set a super
user password before you can set other types of passwords.
Port Configuration – Allows read-and-write access for specific ports but not for global (system-wide)
Read Only – Allows access to the Privileged EXEC mode and CONFIG mode but only with read access.
How To Assign a Password
When you first connect to the CLI, you are at the User EXEC level of the CLI. This is the first level of the CLI. The
next level is the Privileged EXEC level. You need to get to the global CONFIG level of the CONFIG command
structure to assign a permanent password.
To reach the global CONFIG level and assign passwords, use the following steps:
At the opening prompt, enter the following command to go from the User EXEC level to the Privileged EXEC
Access the configuration level of the CLI by entering the following command:
HP9300# configure terminal
To set the super-user password:
HP9300(config)# enable super-user-password <string>
NOTE: You must set a super-user password before you can set other types of passwords.
To set the port-configuration and read-only passwords:
HP9300(config)# enable read-only-password <string>
HP9300(config)# enable port-config-password <string>
How to Recover From a Lost Password
Recovery from a lost password requires direct access to the serial port and a system reset of the device.
NOTE: You can perform this procedure only from the CLI.
To recover from a lost password:
Start a CLI session over the serial interface to the device.
Reboot the device.
While the system is booting, before the initial system prompt appears, enter b to enter the boot monitor mode.
Enter no password at the prompt. This command cannot be abbreviated. This command will cause the
device to bypass the system password check.
Privileged EXEC Level
Global CONFIG Level
2 - 15