Requirement:Controller running AOS: 6.4.4.x and above.
Solution:On controllers running AOS: 6.4.4.x we have the option to set the password for the console access of an AP in the ap system profile.
This restricts unauthorized access to the console of an AP. By default the ap console password is enabled.
Configuration:
Below are the commands to update the password for the console of an AP
(Aruba) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
(Aruba) (config) #ap system-profile Test-AP
(Aruba) (AP system profile "Test-AP") #shell-passwd Aruba@123 ------>User defined password
(Aruba) (AP system profile "Test-AP") #exit
(Aruba) (config) #write memory
Saving Configuration...
Configuration Saved.
(Aruba) (config) #
To Disable the password for the ap console access:
(Aruba) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
(Aruba) (config) #ap system-profile Test-AP
(Aruba) (AP system profile "Test-AP") #shell-passwd passworddisabled
(Aruba) (AP system profile "Test-AP") #exit
(Aruba) (config) #write memory
Saving Configuration...
Configuration Saved.
(Aruba) (config) #
NOTE: The passworddisabled is a special character string. On entering this string, the controller disables the AP console password.
VerificationTo view the default password or the user defined password of the AP console please use the below procedure
The Output is truncated
(Aruba) #encrypt disable
(Aruba) #show ap system-profile Test-AP
AP system profile "Test-AP"
---------------------------
Parameter Value
--------- -----
RF Band g
RF Band for AM mode scanning all
Native VLAN ID 1
SAP MTU N/A
RAP MTU 1200 bytes
LMS IP N/A
Backup LMS IP N/A
AP multicast aggregation Disabled
AP ARP attack protection Disabled
AP multicast aggregation allowed VLANs none
Console enable Enabled
AP Console Password Aruba@123
(Aruba-Master7240) #encrypt enable