Login Overview - HPE FlexFabric 5940 Series Configuration Manual

Login overview

The first time you access the device, you can only log in to the CLI through the console port. After
login, you can change console login parameters or configure other access methods, including Telnet,
SSH, SNMP, and RESTful.
The device supports the FIPS mode that complies with NIST FIPS 140-2 requirements. Support for
features, commands, and parameters might differ in FIPS mode and non-FIPS mode. For more
information about FIPS mode, see Security Configuration Guide.
Telnet is not supported in FIPS mode.
Table 10 Login methods at a glance
Login method
CLI login:
•
Local
console login
•
Telnet login
•
SSH login
•
Modem
dial-in
SNMP access
Default settings and minimum configuration
requirements
By default, local console login is enabled and does not require
authentication. The default user role is network-admin. To
improve device security, configure password or scheme
authentication for the AUX line immediately after you log in to
the device for the first time.
By default, Telnet login is disabled.
To enable Telnet login, perform the following tasks:
•
Enable the Telnet server feature.
•
Assign an IP address to a Layer 3 interface and make sure
the interface and the Telnet client can reach each other.
•
Configure an authentication mode for VTY login users. By
default, password authentication is used but no password
is configured.
•
Assign a user role to VTY login users. By default, a VTY
login user is assigned the network-operator user role.
By default, SSH login is disabled.
To enable SSH login, perform the following tasks:
•
Enable the SSH server feature and configure SSH
attributes.
•
Assign an IP address to a Layer 3 interface. Make sure the
interface and the SSH client can reach each other.
•
Configure scheme authentication for VTY login users. By
default, password authentication is used.
•
Assign a user role to VTY login users. By default, a VTY
login user is assigned the network-operator user role.
By default, modem dial-in is enabled and does not require
authentication. The default user role is network-admin. To
improve device security, configure password or scheme
authentication for the AUX line immediately after you log in to
the device for the first time.
By default, SNMP access is disabled.
To enable SNMP access, perform the following tasks:
•
Assign an IP address to a Layer 3 interface. Make sure the
interface and the NMS can reach each other.
•
Configure SNMP basic parameters.
42
Login
configuration
Configuring CLI login
Configuring local
console login
Configuring Telnet
login
Configuring SSH
login
Logging in through a
pair of modems
Accessing the device
through SNMP