Authentication for Privileged EXEC Command Mode

Table 1. Authentication for Privileged EXEC Mode product support
Feature	Product	Release introduced
Authentication for Privileged EXEC CLI Command Mode	5320 Series	Fabric Engine 8.6
	5420 Series	VOSS 8.4
	5520 Series	VOSS 8.4
	5720 Series	Fabric Engine 8.7

For enhanced security, you can enable user authentication to enter Privileged EXEC command mode. Use the sys priv-exec-password command to enable password authentication.

After you enable password authentication for Privileged EXEC command mode, the system prompts you to enter a password to access Privileged EXEC command mode from User EXEC command mode. You must enter the same password that you used to log on to the switch.

Considerations

The same username and password used to Telnet or SSH to the switch is used to access Privileged EXEC command mode when authentication is enabled.
RADIUS and TACACS+ protocols are supported. If RADIUS and TACACS+ servers are not reachable, access to Privileged EXEC command mode is denied. You must open a new session and type the same username and password used to Telnet or SSH to the switch.
No timeout exists for the password used to log on to the Privileged EXEC command mode.
No limit to the number of retries if you enter an incorrect password.