10.1.4 Setting a password for changing the administrator mode

To execute configuration commands, you must switch to administrator mode by using the enable command. Because the Switch has no pre-defined passwords, executing the enable command at deployment will place you in administrator mode without authentication. However, there is a security risk if any user can switch to administrator mode during normal operation without any password authentication. Be sure to manage the set password so that you do not forget it. If you do not know the password, you will not be able to execute the configuration command.

You should therefore set an administrator password at deployment, as in the following example.

> enable
# password enable-mode
Changing local password for admin.
New password:
Retype new password:
#

Using the aaa authentication enable configuration command, you can implement authentication using a RADIUS or TACACS+ server. For configuration setting examples, see Configuring Authentication with 10.3.2 RADIUS Servers and Configuring Authentication with 10.3.3 TACACS+ Servers.