Dell PowerSwitch S4128F-ON EMC SmartFabric OS10 User Guide Release 10.5.0 - Page 58

Configure Management route To set up remote access to OS10, configure a management route after you assign an IPv4 or IPv6 address to the Management port. The Management port uses the default management route to communicate with a different network. The management route allows you to separate Management traffic from data traffic. 1. (Optional) Ensure that the DHCP client is disabled on the Management interface in INTERFACE mode. no ip address dhcp 2. Configure a management route for the Management port in CONFIGURATION mode. Repeat the command to configure multiple routes. management route {ipv4-address/mask | ipv6-address/prefix-length} {forwarding-router-address | managementethernet} • ipv4-address/mask - Enter an IPv4 network address in dotted-decimal format (A.B.C.D), then a subnet mask in /prefixlength format (/x). • ipv6-address/prefix-length - Enter an IPv6 address in x:x:x:x::x format with the prefix length in /x format. The prefix range is /0 to /128. • forwarding-router-address - Enter the next-hop IPv4/IPv6 address of a forwarding router that serves as a management gateway to connect to a different subnet. • managementethernet - Send traffic on the Management port for the configured IPv4/IPv6 subnet. NOTE: Management routes are separate from IPv4 and IPv6 routes and are only used to manage the switch through the Management port. NOTE: Do not configure the same prefix in both the static route and management route. If the same prefix has to be used, use management VRF. NOTE: Management VRF is currently not supported on the MX7000 platforms. Configure management route OS10(config)# management route 10.10.20.0/24 10.1.1.1 OS10(config)# management route 172.16.0.0/16 managementethernet Configure username and password To set up remote access to OS10, create a username and password after you configure the management port and default route. The user role is a mandatory entry. Enter the password in clear text. It is converted to SHA-512 format in the running configuration. A password must have at least nine characters, including alphanumeric and special characters, and at least five different characters from the password that is previously used for the same username. For example: OS10(config)# username admin password alpha404! role sysadmin For backward compatibility with OS10 release 10.3.1E and earlier, passwords entered in MD-5, SHA-256, and SHA-512 format are supported. To increase the required password strength, use the password-attributes command. • Create a username and password in CONFIGURATION mode. username username password password role role ○ username username - Enter a text string. A maximum of 32 alphanumeric characters; one character minimum. ○ password password - Enter a text string. A maximum of 32 alphanumeric characters; nine characters minimum. ○ role role - Enter a user role: ▪ sysadmin - Full access to all commands in the system, exclusive access to commands that manipulate the file system, and access to the system shell. A system administrator can create user IDs and user roles. The default privilege level is 15. ▪ secadmin - Full access to configuration commands that set security policy and system access, such as password strength, AAA authorization, and cryptographic keys. A security administrator can display security information, such as cryptographic keys, login statistics, and log information. The default privilege level is 15. 58 Getting Started with Dell EMC SmartFabric OS10