Hsecure Mode - Avaya 8800 Commissioning Manual

Access level
Layer 1 read/write
Layer 2 read/write
Layer 3 read/write
(8800/8600 switches
only)
Read/write
Read/write/all

hsecure mode

The Avaya Ethernet Routing Switch 8800/8600 supports a flag called high secure (hsecure).
The hsecure flag introduces the following behaviors for the password: 10-character
enforcement, aging time, limitation of failed logon attempts, and a protection mechanism to
filter certain IP addresses.
After you enable the hsecure flag, the software enforces the 10-character rule for all
passwords. After you upgrade from a previous release, if the password does not contain at
least 10 characters, you must change your password to the mandatory character length. This
password must contain a minimum of two uppercase characters, two lowercase characters,
two numbers, and two special characters.
Default passwords and community strings
If the switch starts in hsecure mode as a default factory setting, and you have not configured
a password, the default passwords are changed to respect this rule. The following table
describes the default passwords.
Commissioning
Description
View most switch configuration and
status information and change
physical port settings.
View and change configuration and
status information for Layer 2
(bridging and switching) functions.
View and change configuration and
status information for Layer 2 and
Layer 3 (routing) functions.
View and change configuration and
status information across the
switch. You cannot change security
and password settings. This access
level is equivalent to SNMP read/
write community access.
Permits all the rights of Read/Write
access and the ability to change
security settings, including the CLI
and Web-based management user
names and passwords and the
SNMP community strings.
System logon
Default Default
logon password
l1 l1
l2 l2
l3 l3
rw rw
rwa rwa
June 2011 13