nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Configuring an enable password on ICX7450 in 9.0

frnkblk

I scoured the documentation but could not find it -- how do I configure an enable password in version 9.0? Every time I SSH into our switches and go into enable mode I get a warning:

SSH@router>en
No password has been assigned yet...
SSH@router#

Frank

Find more posts tagged with

Accepted answers

BenBeck

I believe that is referring to the following 8.x command:

device# configure terminal
device(config)# aaa authentication enable implicit-user

This command is deprecated in 9.x

All comments

BenBeck

Hey @frnkblk

You will need an authentication method list for enable. If you are using local database, it would look like this:

SSH@ICX(config)#aaa authentication enable default local

If you are coming from 8.x releases, there are a lot of changes in authentication with 9.x. The 9.0 release notes will list new, modified and deprecated commands. The respective guides would then have the details on said new commands.

frnkblk

Thanks -- that kind of worked, but I get asked for a username as well.

root@nagios:/tmp# ssh username@<redacted-IP>
Password:

SSH@router>enable

Password:
SSH@router#

Is there a way to just have an enable password? The documentation says this (emphasis added),

If enable authentication is configured on the device, when a user attempts to gain Super User access to the Privileged EXEC and global configuration levels of the CLI, by default the device prompts for a username and password. You can configure the device to prompt only for a password. The device uses the username entered at login, if one is available. If no username was entered at login, the device prompts for both username and password.

I do have username at login, as you can see from the output I shared, but it still asks for a username.

BenBeck

I believe that is referring to the following 8.x command:

device# configure terminal
device(config)# aaa authentication enable implicit-user

This command is deprecated in 9.x

frnkblk

Thanks -- another 9.x documentation item to clean up