Comments on: How to set passwords from the CLI? http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/ technology, networking and IP telephony Fri, 17 May 2013 22:38:57 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: Michael McNamara http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-4532 Michael McNamara Tue, 19 Jul 2011 02:33:19 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-4532 I’ve never tested this scenario… not currently using either RADIUS or TACACS+ for authentication.

Cheers!

]]> By: Gus http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-4513 Gus Fri, 15 Jul 2011 16:35:15 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-4513 Hi Michael,
Do you have experience with ERS8600 and tacacs +?
I configured ERS8600 v5.1.3.1 with TACACS+ but when the tacacs is down I can not authenticate using local users (RWA,RW,RO…), such as ERS5520 usually do.

Has anyone checked?

Thanks
Gus

]]> By: Michael McNamara http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-2462 Michael McNamara Wed, 11 Aug 2010 21:06:56 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-2462 Hi Fernando,

You’ll need to troubleshoot the problem.

Has this ever worked? Is SNMP disabled on the switch? Are there any access policies restricting/blocking SNMP access?

Assuming you have basic connectivity, out of the box the read and write SNMP community strings are public and private respectively. You should only need to change the SNMP community strings – commands provided above.

If someone else as performed additional configurations beyond ‘out of the box’ you’ll need to troubleshoot further.

Good Luck!

]]> By: Fernando http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-2459 Fernando Wed, 11 Aug 2010 15:34:03 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-2459 Hi Michael, tanks for your help.
The DVM return the error mensage
172.16.X.X tinme out. This could be due to:
1. No route to device.
2. Network is busy.
3. SNMP service disable on device.
4. Invalid read community.
5. Try to access a device trough stanby CPU.

Tanks

Fernando

]]> By: Michael McNamara http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-2457 Michael McNamara Wed, 11 Aug 2010 04:34:23 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-2457 Hi Fernando,

You should have a look at this post.

You need to configure the SNMP community strings. You can try these commands (depending on the software release you are running on the switch);

ERS-1648T:1# config snmp-v3 community commname first new-commname readme123
ERS-1648T:1# config snmp-v3 community commname second new-commname writeme123

Good Luck!

]]> By: Fernando http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-2455 Fernando Tue, 10 Aug 2010 19:43:13 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-2455 How configure device manager may 1612 don´t conect to device manager usin te snmp v1, v2
Tanks for your help

]]> By: Gabriel Palafox http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-752 Gabriel Palafox Fri, 03 Apr 2009 15:56:50 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-752 Thanks, I already saw that document, but I didn´t knew what I´m missing. In this moment is working, the problem was with a Radius attibute that I had to configure on Radius server.

Just to share:
If you want read-only access, you need to configure by user:
You need to add attribute “User name” (in conditions for the policy that you are configuring) with a value of the username that you have, eg. gabrielpalafox
Add to this you need the Attribute of “Service-Type” with the value of NAS prompt.

If you want read-write access, you need to configure by user:
You need to add attribute “User name” (in conditions for the policy that you are configuring)
Add to this you need the Attribute of “Service-Type” with the value of Administrative.

Hope this could helps for your community.

Thanks.

]]> By: Michael McNamara http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-748 Michael McNamara Thu, 02 Apr 2009 23:46:39 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-748 Hi Gabriel,

Thankfully Nortel has already document how to use a RADIUS server for authentication of administrative access.

http://www.michaelfmcnamara.com/files/2008_03_26_Authentication_Authorization_and_Accounting_for_ERS_and_ES_TCG_NN48500558.pdf

Good Luck!

]]> By: Gabriel Palafox http://blog.michaelfmcnamara.com/2008/03/how-to-set-passwords-from-the-cli/#comment-740 Gabriel Palafox Thu, 02 Apr 2009 20:57:31 +0000 http://maddog.mlhs.org/blog/2008/03/how-to-set-passwords-from-the-cli/#comment-740 Hi Mike.

I´m trying to implement Radius authentication over 5520 and 460 switches. I have cisco routers too, and it´s working on it. But I don´t know what I need to make it works on Nortel switches. I´m trying with the user rw, RW, rwa, bsrw and when I see the log on Radius server, send me a message with successful authentication, but in the switch send me a message “access denied … radius”, there is a document from Nortel with the configuration, but I miss something and I can´t figure out what I´m missing.

Do you have any experience with Radius authentication on 5520 and 460 switches?

Thanks.

]]>