Access to monitor mode

The device in strict FIPS mode with the default policy applied does not allow access to monitor mode commands that perform memory access.

When the device is operating in FIPS mode, you can access all monitor mode commands, including memory debug commands, in the following instances:

• A flexible FIPS policy with the fips policy allow monitor-full-access command configured allows access memory debug commands.
• A strict FIPS policy does not allow access to memory debug commands. To apply a more flexible policy and allow access to all monitor commands, either configure a more flexible FIPS policy or disable FIPS mode to enter monitor mode. Refer to Accessing monitor mode from FIPS mode.
  

  Note

  Making changes to the default FIPS policy on the device is not recommended and weakens the security of the device.
• In the event of continuous reboot or failure on the Extreme device, you can access monitor mode to perform troubleshooting. Refer to Accessing monitor mode in the event of continuous failure.

Perform the necessary operations after allowing the device access to the memory debug commands. Refer to Debugging in monitor mode.

To enable FIPS mode on the device after you have completed your use of monitor mode, refer to Returning to FIPS mode from monitor mode.