Changing EXOS Admin Password during ZTP+

[RobertD1]

Hello,

I tried to use the script called Exos Password Change but it fails with Error: Account admin does not exist!

The default admin account does exist but not under configuration aaa which is where the script is looking. Not sure if the script assumes RADIUS switch management is enabled.

The command show configuration aaa | in " admin encrypted" also confirms it and returns nothing.

Is there another script example which exists to update the default admin password when the EXOS switch is first seen during the discovery process?

Thanks,

Rob

[Robert_Haynes · Accepted solution]

AFAIK the admin account or switch account/password would be set during the ZTP+ process based on the Admin Profile selected in the ZTP+ Device Defaults or manually set via ZTP+ devices during staging under the Discovered tab.

There should be no need to run a separate script either pre or post ZTP.

[jeronimo]

Just a quick note: Admin profile can also set SNMP credentials. However factory default SNMP creds will not be removed! So don't think you're secure only because you specified non-default credentials in the profile. Apparently this is "by design" ...

[RobertD1]

Hi Robert Haynes,

You are spot on. I see now it gets the password from the CLI Credentials associated with the Admin Profile assigned under ZTP+ Device Defaults. 

Thanks,

Rob