topic Re: Configuring an enable password on ICX7450 in 9.0 in ICX Switches

Configuring an enable password on ICX7450 in 9.0

frnkblk — Fri, 05 Aug 2022 16:07:21 GMT

I scoured the documentation but could not find it -- how do I configure an enable password in version 9.0? Every time I SSH into our switches and go into enable mode I get a warning:

SSH@router>en
No password has been assigned yet...
SSH@router#

Frank

Re: Configuring an enable password on ICX7450 in 9.0

BenBeck — Fri, 05 Aug 2022 16:18:52 GMT

Hey @frnkblk

You will need an authentication method list for enable. If you are using local database, it would look like this:

SSH@ICX(config)#aaa authentication enable default local

If you are coming from 8.x releases, there are a lot of changes in authentication with 9.x. The 9.0 release notes will list new, modified and deprecated commands. The respective guides would then have the details on said new commands.

Re: Configuring an enable password on ICX7450 in 9.0

frnkblk — Fri, 05 Aug 2022 16:54:05 GMT

Thanks -- that kind of worked, but I get asked for a username as well.

root@nagios:/tmp# ssh username@<redacted-IP>
Password:

SSH@router>enable

Password:
SSH@router#

Is there a way to just have an enable password? The documentation says this (emphasis added),

If enable authentication is configured on the device, when a user attempts to gain Super User access to the Privileged EXEC and global configuration levels of the CLI, by default the device prompts for a username and password. You can configure the device to prompt only for a password. The device uses the username entered at login, if one is available. If no username was entered at login, the device prompts for both username and password.

I do have username at login, as you can see from the output I shared, but it still asks for a username.

Re: Configuring an enable password on ICX7450 in 9.0

BenBeck — Fri, 05 Aug 2022 17:04:46 GMT

I believe that is referring to the following 8.x command:

device# configure terminal
device(config)# aaa authentication enable implicit-user

This command is deprecated in 9.x

Re: Configuring an enable password on ICX7450 in 9.0

frnkblk — Fri, 05 Aug 2022 17:19:39 GMT

Thanks -- another 9.x documentation item to clean up