Dell PowerSwitch S4820T Configuration Guide for the S4820T System 9.14.1.0 - Page 51

◦ 8 - input the password that is already encrypted using sha256-based encryption method. - password: Enter the password string for the user. - dynamic-salt: Generates an additional random input to password encryption process whenever the password is configured. - privilege level: Assign a privilege levels to the user. The range is from 0 to 15. - role role-name: Assign a role name for the user. Dell EMC Networking OS encrypts type 5 secret and type 7 password based on dynamic-salt option such that the encrypted password is different when an user is configured with the same password. NOTE: dynamic-salt option is shown only with secret and password options. In dynamic-salt configuration, the length of type 5 secret and type 7 password is 32 and 16 characters more compared to the secret and password length without dynamic-salt configuration. An error message appears if the username command reaches the maximum length, which is 256 characters. The dynamic-salt support for the user configuration is added in REST API. For more information on REST support, see Dell EMC Networking Open Automation guide. Configuring the Enable Password Access EXEC Privilege mode using the enable command. EXEC Privilege mode is unrestricted by default. Configure a password as a basic security measure. There are three types of enable passwords: • enable password is stored in the running/startup configuration using a DES encryption method. • enable secret is stored in the running/startup configuration using MD5 encryption method. • enable sha256-password is stored in the running/startup configuration using sha256-based encryption method (PBKDF2). Dell EMC Networking recommends using the enable sha256-password password. To configure an enable password, use the following command. • Create a password to access EXEC Privilege mode. CONFIGURATION mode enable [password | secret | sha256-password] [level level] [encryption-type] password - level: is the privilege level, is 15 by default, and is not required. - encryption-type: specifies how you input the password, is 0 by default, and is not required. ◦ 0 is to input the password in clear text. ◦ 5 is to input a password that is already encrypted using MD5 encryption method. Obtain the encrypted password from the configuration file of another device. ◦ 7 is to input a password that is already encrypted using DES encryption method. Obtain the encrypted password from the configuration file of another device. ◦ 8 is to input a password that is already encrypted using sha256-based encryption method. Obtain the encrypted password from the configuration file of another device. Configuration File Management Files can be stored on and accessed from various storage media. Rename, delete, and copy files on the system from EXEC Privilege mode. Getting Started 51