topic Changing EXOS Admin Password during ZTP+ in ExtremeCloud IQ- Site Engine Management Center

Changing EXOS Admin Password during ZTP+

RobertD1 — Tue, 18 Apr 2023 13:10:31 GMT

Hello,

I tried to use the script called Exos Password Change but it fails with Error: Account admin does not exist!

The default admin account does exist but not under configuration aaa which is where the script is looking. Not sure if the script assumes RADIUS switch management is enabled.

The command show configuration aaa | in " admin encrypted" also confirms it and returns nothing.

Is there another script example which exists to update the default admin password when the EXOS switch is first seen during the discovery process?

Thanks,

Rob

Re: Changing EXOS Admin Password during ZTP+

Robert_Haynes — Tue, 18 Apr 2023 15:28:28 GMT

AFAIK the admin account or switch account/password would be set during the ZTP+ process based on the Admin Profile selected in the ZTP+ Device Defaults or manually set via ZTP+ devices during staging under the Discovered tab.

There should be no need to run a separate script either pre or post ZTP.

Re: Changing EXOS Admin Password during ZTP+

RobertD1 — Tue, 18 Apr 2023 17:00:16 GMT

Hi Robert Haynes,

You are spot on. I see now it gets the password from the CLI Credentials associated with the Admin Profile assigned under ZTP+ Device Defaults.

Thanks,

Rob

Re: Changing EXOS Admin Password during ZTP+

jeronimo — Thu, 20 Apr 2023 10:23:04 GMT

Just a quick note: Admin profile can also set SNMP credentials. However factory default SNMP creds will not be removed! So don't think you're secure only because you specified non-default credentials in the profile. Apparently this is "by design" ...