This command enables you to toggle between the default OpenSSL library (FIPS compatible) and FIPS capable library.
| on | Enables FIPS mode. |
| off | Disable FIPS mode. |
Off.
After enabling/disabling FIPS, EPM will be notified to change the bit dedicated to FIPS Mode. As per requirement, currently SSH and SNMP (Simple Network Management Protocol) will use this bit to toggle between normal and FIPS mode.
# sh security fips-mode FIPS Mode (current) : Off FIPS Mode (configured) : Off # configure security fips-mode on FIPS mode will be enabled only after rebooting the switch. SNMPv3 users configured with either md5 authentication or DES encryption will be discarded after reboot. SSH existing configuration of ciphers/MACs will be lost after reboot. Python scripting configuration is ignored when FIPS mode is 'on'. # show security fips-mode FIPS Mode (current) : On FIPS Mode (configured) : On
This command was first available in ExtremeXOS 21.1.
Current and configured information added in ExtremeXOS 22.7.
This command is available on the Summit X450-G2, X460-G2, X670-G2, X770, and ExtremeSwitching X440-G2, X590, X620, X690, X870 series switches.
Print
this page
Email this topic
Feedback
View PDF
Download EPUB