Can i change the password when connect Extreme Aspen 8810 for the first time?

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
Nice to see u guys.
I have Extreme Aspen 8810.
Is this switch provide function to change password when connect this switch for the first time?
and service port also??
I mean obviously I can change the password anytime,
What i'm curious about is this switch constrain to change the password or not when we connect this switch for the first time. 
both of serial port and service port (SSH, HTTP, SNMP, TELNET etc....)
please let me know this.
Photo of jihoon cho

jihoon cho

  • 70 Points

Posted 3 years ago

  • 0
  • 1
Photo of Stephen Williams

Stephen Williams, Employee

  • 9,034 Points 5k badge 2x thumb
You are not required to change your password from the default, but it is recommended.  Password policies can force users to change their password.

# conf account "admin" password-policy ?
  char-validation            Password character validation
  history                    Check passwords against ones stored in history
  lockout-on-login-failures  Lockout account in case of multiple login failures
  max-age                    Maximum age of password, between 1 and 365 days
  min-length                 Minimum length of password, between 1 and 32 characters
(Edited)
Photo of Annas Shaker

Annas Shaker, Alum

  • 240 Points 100 badge 2x thumb
Jihoon, you won't be prompted to change the password when you log into the switch the first time.
Photo of Prashanth KG

Prashanth KG, Employee

  • 5,300 Points 5k badge 2x thumb
Hi Jihoon,

When you are logging into the switch for the first time, you would be provided option to change the failsafe username and password and then a recommendation would be provided to change the default admin password. 

***************************************Output truncated **********************

This switch currently has all management methods enabled for convenience reasons                                                                                                                                                      .Please answer these questions about the security settings you would like to use.

Changing the default failsafe account username and password is highly
recommended.  If you choose to do so, please remember the username and
password as this information cannot be recovered.
Would you like to change the failsafe account username and password
now? [y/N]:

Would you like to permit failsafe account access via the management port?
[y/N]:

Since you have chosen less secure management methods, please remember to
increase the security of your network by taking the following actions:


  * change your admin password

**********************************************************************************************

As discussed above, it is not a constraint that the password should be changed at the first login. Whenever the switch is unconfigured or booted into the factory default, it has to be considered as the first login.

If you need any additional notification for the user to change the password whenever the switch is unconfigured, we can use a default.xsf script to create a banner which would notify the user to change the password. 

default.xsf:

BD-8810.1 # vi default.xsf

configure banner after-login
#######################################################
ENSURE TO CHANGE THE ADMIN PASSWORD USING THE COMMAND##
Configure account admin                              ##
#######################################################

Whenever the switch is unconfigured, your login prompt would look like below: 


Authentication Service (AAA) on the master node is now available for login.
Loading default.xsf.
Script Loaded Successfully.
The output of loading default script can be seen by executing "show script output default".


login: admin
password:

ExtremeXOS
Copyright (C) 1996-2014 Extreme Networks. All rights reserved.
Protected by US Patent Nos: 6,678,248; 6,104,700; 6,766,482; 6,618,388; 6,034,957; 6,859,438; 6,912,592; 6,954,436; 6,977,891; 6,980,550; 6,981,174; 7,003,705; 7,017,082; 7,046,665; 7,126,923; 7,142,509; 7,149,217; 7,152,124; 7,154,861; 7,245,619; 7,245,629; 7,269,135; 

Press the <tab> or '?' key at any time for completions.
Remember to save your configuration changes.

#######################################################
ENSURE TO CHANGE THE ADMIN PASSWORD USING THE COMMAND##
Configure account admin                              ##
#######################################################  


Note: This script has to be configured manually. So, we cannot do much for the login prompt of the out of the box switches for the first time. 

Hope this helps!