Allows you to change management access to your device and to enhance security.
This command has no arguments or variables.
N/A.
This command runs an interactive script that lets you configure IP management connectivity if you choose not to use Auto Provisioning. It also lets you choose whether to enable or disable SNMP, Telnet, and ports.
Refer to “Using Safe Defaults Mode” in the Switch Engine v33.1.1 User Guide for complete information on the safe default mode.
After you issue this command, the system presents you with the following interactive script:
The following command reruns the interactive script to configure management access:
# run provisioning This switch is in a default state. Before entering the Command Line Interface, please answer these questions about management connectivity and security. You may quit by answering 'q' to accept the defaults for remaining questions. Press <ENTER> to accept the default value listed, or shown in upper case. By default, Auto-Provisioning uses DHCP on all Ethernet ports as this switch attempts to connect to an Extreme Networks management product. Instead of using DHCP, do you want to 'disable auto-provision' and configure a static IP address, default gateway and DNS server now? [y/N/q]: y You may answer 's' to skip questions about management connectivity to keep Auto-Provisioning enabled and proceed to the next section. Which Ethernet port will be used for a management connection? Enter 'Mgmt' for switch's Mgmt port, or an in-band port number [MGMT / <port num> / s to skip]: <ENTER> Enter the IPv4 or IPv6 address/subnet mask length for this VLAN, e.g. '192.168.4.5/24' or '192.168.4.5 255.255.255.0', '2001::1/64' or 's' to skip : 10.99.16.200/16 IP interface for VLAN Mgmt has been created. If a network management product is not present on this subnet 10.99.16.200/24, a default route is needed to establish a management connection. To create a default route, enter the gateway IP address, or enter 'none' if a management product is on this subnet. [Default is 10.99.16.1 / none / s to skip]: <ENTER> Enter a DNS (Domain Name System) name server [Default is 8.8.8.8 / q] : q Management connectivity section completed. Auto-Provisioning has been disabled. Multiple Spanning Tree Protocol (MSTP) is enabled by default to prevent broadcast storms Would you like to disable MSTP? [y/N/q]: The switch offers an enhanced security mode. Would you like to read more, and have the choice to enable this enhanced security mode? [y/N/q]: Telnet is enabled by default. Telnet is unencrypted and has been the target of security exploits in the past. Would you like to disable Telnet? [y/N/q]: SNMP access is disabled by default. SNMPv1/v2c uses no encryption, SNMPv3 can be configured to eliminate this problem. Would you like to enable SNMPv1/v2c? [y/N/q]: Would you like to enable SNMPv3? [y/N/q]: All ports are enabled by default. In some secure applications, it may be more desirable for the ports to be turned off. Would you like unconfigured ports to be turned off by default? [y/N/q]: No failsafe account username and password are in effect. If you choose to configure them, please remember them because they cannot be recovered. Would you like to configure the failsafe username and password now? [y/N/q]: Do you want to see the list of CLI commands executed by this provisioning script? [y/N/q]: y configure vlan Mgmt ipaddress 10.99.16.200/24 configure iproute add default 10.99.16.1 vr VR-Mgmt configure dns-client add name-server 8.8.8.8 vr VR-Mgmt disable auto-provision configure auto-provision cloud-connector server vr VR-Mgmt enable auto-provision cloud-connector Do you want to see some basic CLI commands before entering the CLI? [y/N/q]: y Operation Monitoring Configuration ------------------ ------------ ----------------------------- save configuration show vlan configure vlan add ports download image show ports configure ports ping show sharing enable sharing reboot show log configure stacking easy-setup To run this initial provisioning script again, use "run provisioning". For help with CLI commands, press the <TAB> key or question mark <?> key.
This command was first available in ExtremeXOS 32.7.1.
This command is available on all Universal switches supported in this document.