Disabling FIPS mode

Use the no fips enable command to disable FIPS mode on the Extreme device.

After you enter the command, a warning displays that FIPS mode will be disabled.

This command performs the following policy-related operations:

• Enables TFTP access. Use followind command: fips policy allow tftp-access.
• Re-enables SNMP access to critical security parameter (CSP) MIB objects.
• Re-enables SNMPv3 encryption protocol DES for future SNMPv3 user configuration.
• Re-enables access to monitor mode.
• Zeroizes shared secrets, SSH and HTTPS host keys, and the HTTPS certificate based on the configured FIPS policy.

The no fips enable command also performs the non-policy-related operation of re-enabling the RC4 cipher for the HTTPS server.

Changes to the running configuration are not saved to the startup configuration; therefore, when the device reloads, it returns to FIPS mode.

Use the write memory command to save the running configuration.

Note

Use the clear ikev2 sa command to manually remove the connection once FIPS mode is disabled. You can use the clear ikev2 sa command after using the fips zeroize all command as well.