topic Re: VSP - change/delete user rwa in ExtremeSwitching (VSP/Fabric Engine)

VSP - change/delete user rwa

EF — Wed, 26 Aug 2020 16:49:17 GMT

Hi team,

Is there any way to delete “rwa” default user or at least changes its name from VSP rel 8.X?

Regards,

Re: VSP - change/delete user rwa

SamPirok — Wed, 26 Aug 2020 21:33:41 GMT

Hi EF, I believe you can change it with the command specified in this article: https://extremeportal.force.com/ExtrArticleDetail?n=000049378&q=delete%20%E2%80%9Crwa%E2%80%9D%20default%20user%20VSP%20rel%208.X

Re: VSP - change/delete user rwa

Dilraj_Singh_Kh — Wed, 26 Aug 2020 21:45:06 GMT

You can do something like below:

VSP-4450GSX-PWR+:1(config)#username admin level rwa
Do you want to change username for the default RWA user ? (y/n) ?

Re: VSP - change/delete user rwa

Miguel-Angel_RO — Thu, 27 Aug 2020 03:34:16 GMT

EF,

When running those kind of tasks, don’t forget to also clean the snmpv2 default communities and snmpv3 default user/group (called initial) with:
no snmp-server community-by-index first
no snmp-server community-by-index firstvrf512
no snmp-server community-by-index second
no snmp-server community-by-index secondvrf512
no snmp-server group initial
no snmp-server user initial

They can also be used as backdoors.

Same applies for the web user.

Mig

Re: VSP - change/delete user rwa

Dinesh_Rego — Thu, 10 Sep 2020 05:36:32 GMT

The original question has already been answered by Dilraj, but this post provides additional information about users. Starting with VOSS 7.0, we introduced the ability to support more than one user with the same privilege level.

There are 3 default cli users - ro, rw and rwa and you can have 7 additional users that can have ro or rw or rwa privilege level.

Command to create a new user: username add {user_name} level {ro|rw|rwa} enable

Example: (config)#username add user5 level rw enable

Enter password : *******

Re-enter password : *******

The additional users can be disabled (excluding rwa users) or deleted. User name can be changed only for default users. For the configured users, the user name is specified at creation time and it cannot be changed later.