Feature History For Consent Token - Cisco Catalyst 9400 System Management Configuration Manual

Consent Token
Step 2
Send the challenge string to a Cisco Authorized Personnel.
Send the challenge string generated by the device to a Cisco Authorized Personnel through e-mail or Instant
Message.
The Cisco Authorized Personnel processes the unique challenge string and generates a response. The response
is also a base-64 string that is unique. The Cisco Authorized Personnel copies this response string and sends
it to you through e-mail or Instant Message.
Step 3 Input the response string onto your device.
Example:
Device# request consent-token accept-response shell-access
l R 1 y 2 A A U K F c A A A A B A A A B Y l V D Z 2 d 6 M n k x L 3 J x T T J S S C 9 F Z E 5 a W n R S a 1 F t e S 9 P O W Z q R U N l T k 1 L L 3 V o U W x T c 0 F s O H l 5 O W 5 v c k Q 4 Y W V O e l p Z Z G Y N C k N p W H Y 0 b 1 B 4 Q 0 0 0 U G s 1 M 2 Z E M U p o a z B C U k Y y M 3 F M L 1 A 2 c k V j M 3 p a R 0 5 w d H c v c k 9 5 U V d u Y U V u T n A 5 b n h I Z 0 9 C N E 0 N C j B m V j h 4 b 3 I 4 T z E 3 a H N M a U 1 J e D Q 3 Y W t k d E 9 X b 0 J h T m l z M V R w e F B V Z E 9 3 Q U x v Z D V E b m o 4 U E t i R 0 1 V V U M 5 b 3 l Z W X Q N C j F I R n J P b X c z c m p s Z T J H U n I x O W J U N k Z L T W l p Z 0 Z m b E N V R W o 4 K 2 x o a X g x S 0 Z t d D V P c D B Y c z V P S U 4 3 L 0 d S K 1 p G T n o N C m Y x T U t j a W 1 O W D h W T T N L Q 0 Z W N U R H U 3 p I e n F 1 U F B x Z V N D U 0 x L N k h X U T F R O T l F M X J V a k d l Z 1 N q T W x n N F l y S k J Y L 0 w N C n p a T D V V R n V F d W p R W D d D U T h I d k V P M 1 E 9 P Q = =
% Consent token authorization success
*Jan 18 02:51:37.807: %CTOKEN-6-AUTH_UPDATE: Consent Token Update (authentication success:
Shell access 0).
Device# request platform software system shell
Activity within this shell can jeopardize the functioning of the system.
Are you sure you want to continue? [y/n] y
Device#
*Jan 18 02:56:59.714: %CTOKEN-6-AUTH_UPDATE: Consent Token Update (authorization for Shell
access 0 will expire in 10 min).
Input the response string sent to you by the Cisco Authorized Personnel using the request consent-token
accept-response shell-access response-string command.
If the challenge-response pair match, you are authorized to access system shell. If the challenge-response pair
do not match, an error is displayed and you are required to repeat steps 1 to 3.
After you are authorized, you can access system shell for the requested time-slot.
The device sends a message when there is ten minutes remaining of the authorization session.
Step 4
Terminate the session.
Example:
Device# request consent-token terminate-auth
% Consent token authorization termination success
Device#
*Jan 18 23:33:02.937: %CTOKEN-6-AUTH_UPDATE: Consent Token Update (terminate authentication:
Shell access 0).
Device#
When you finish accessing system shell, you can end the session using the request consent-token
terminate-auth command. You can also force terminate the session prior to the authorization timeout using
this command. The session also gets terminated automatically when the requested time slot expires.

Feature History for Consent Token

This table provides release and related information for features explained in this module.
These features are available on all releases subsequent to the one they were introduced in, unless noted
otherwise.
System Management Configuration Guide, Cisco IOS XE Bengaluru 17.4.x (Catalyst 9400 Switches)
Feature History for Consent Token
387