Configuring Passwords - Cisco 4215 - Intrusion Detection Sys Sensor Configuration Manual

Configuring User Parameters
The root user's password is synchronized to the service account's password when the service account is
Note
created. To gain root access you must log in with the service account and switch to user root with the
su - root command.
To create the service account, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Enter configuration mode:
Step 2
sensor# configure terminal
Specify the parameters for the service account:
Step 3
sensor(config)# user username privilege service
A valid username contains 1 to 64 alphanumeric characters. You can also use an underscore (_) or dash
(-) in the username.
Specify a password when prompted.
Step 4
If a service account already exists for this sensor, the following error is displayed and no service account
is created:
Error: Only one service account allowed in UserAccount document
Exit configuration mode:
Step 5
sensor(config)# exit
sensor#
When you use the service account to log in to the CLI, you receive the following warning:
************************ WARNING *******************************************************
UNAUTHORIZED ACCESS TO THIS NETWORK DEVICE IS PROHIBITED. This account is intended to be
used for support and troubleshooting purposes only. Unauthorized modifications are not
supported and will require this device to be reimaged to guarantee proper operation.
****************************************************************************************

Configuring Passwords

Use the password command to update the password on the local sensor. You can also use this command
to change the password for an existing user or to reset the password for a locked account.
A valid password is 6 to 32 characters long. All characters except space and '?' are allowed.
To change the password, follow these steps:
To change the password for another user or reset the password for a locked account, follow these steps:
Step 1
a.
b.
Cisco Intrusion Prevention System Sensor CLI Configuration Guide for IPS 5.0
4-14
Log in to the CLI using an account with administrator privileges.
Enter configuration mode:
sensor# configure terminal
Chapter 4 Initial Configuration Tasks
78-16527-01