A Security
Administrator can set a plain-text or encrypted password for access to CLI test
commands. The
password
value is stored in
/flash along
with the boot configuration information. The
show
configuration and
save
configuration commands will
never output
this value in plain text.
The Global
Configuration mode command
tech-support
test-commands [encrypted] password
new_password
[ old-password
old_password
] sets an encrypted or
plain-text password for access to CLI test-commands.
This command
sequence is shown below.
[local]host_name# config
[local]host_name(config)# tech-support test-commands password new_password [ old-password old_password ]
[local]host_name(config)#
If the new
password replaces an existing password, you must enter the old password for the
change to be accepted.
If the old password is not entered or does not match the
existing configured value, the following error message appears: "tech-support
password is already configured". A prompt then appears to accept entry of the
old password: "Enter old tech-support password:".
Entering
old-password
old_password allows you to replace the existing password
without being prompted to enter the old password. If you incorrectly enter the
old password or do not enter the old password, an error message appears:
"Failure: Must enter matching old tech-support password to replace existing
password".
The Quick Setup
Wizard (Exec mode
setup command)
also prompts for entry of a tech-support test-commands password. If you have
forgotten the old tech-support password, you can run
setup directly
from the Console port to enter a new tech-support password.
When a test-commands
password is configured, the Global Configuration mode command
cli test-commands
[ encrypted ] password
password
requires the entry of the password keyword. If the
encrypted
keyword is specified, the
password
argument is interpreted as an encrypted string containing the password value.
If the
encrypted
keyword is
not specified,
the
password
argument is interpreted as the actual plain text value
Important:
If
tech-support
test-commands password is never configured, StarOS will create a new
password. If the
password
keyword is not entered for
cli
test-commands, the user is prompted (no-echo) to enter the password. Also,
cli hidden
must be enabled by an administrator to access the CLI test-commands.