Controller-less WLANs

 View Only
last person joined: one year ago 

Articles relating to existing and legacy HPE Aruba Networking products and solutions including IAP, Central / HPE Aruba Networking Central, MSR, and Outdoor Mesh

How to enforce hash on the mgmt-user password on Instant? 

Mar 15, 2019 04:21 PM

Requirement:

How to enforce hashing on the mgmt-user password on Instant AP? 



Solution:

IAP running pre 4.3 version had an option to check the mgmt-user password by running  "show running-configuration no-encrypt" command.

Hence for advance security from 4.3.0.0 version on IAP hashing of mgmt-user password is supported. Enforce hashing of management users passwords is supported for all the user-type :local, read-only and guest-registration

A hashed password is more secured than an encrypted password because encrypted password can be decrypted back but a hashed password cannot be reversed back to original text.

Hash-mgmt-password is enabled by default on 4.3 image

 



Configuration:

IAP#configure terminal
IAP (config)#hash-mgmt-password
IAP (config)#hash-mgmt-user admin password cleartext admin123
IAP (config)#hash-mgmt-user viewonly password cleartext viewonly usertype read-only
IAP (config)#hash-mgmt-user guest password cleartext guest usertype guest-mgmt
IAP#commit apply



Verification

IAP#show mgmt-user

Statistics
0 Favorited
9 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.