Failsafe Accounts

The failsafe account is last possible method to access your switch.

This account is never displayed by the show accounts command, but it is always present on the switch. To display whether the user configured a username and password for the failsafe account, or to show the configured connection-type access restrictions, use the following command: show failsafe-account .

The failsafe account has admin access level.

To configure the account name and password for the failsafe account, use the following command:

configure failsafe-account {[deny | permit] [all | control | serial | ssh {vr vr-name} | telnet {vr vr-name}]}

When you use the command with no parameters, you are prompted for the failsafe account name and prompted twice to specify the password for the account.

For example:

# configure failsafe-account 
enter failsafe user name: blue5green 
enter failsafe password: 
enter password again: 

When you use the command with the permit or deny parameter, the connection-type access restrictions are altered as specified. For example:

# configure failsafe-account deny all
# configure failsafe-account permit serial

The failsafe account is immediately saved to NVRAM. On a SummitStack, the failsafe account is saved in the NVRAM of every node in the active topology.

Note

On a SummitStack, when the synchronize stacking {node-address node-address | slot slot-number } command is used, the failsafe account is transferred from the current node to the specified nodes in the stack topology.

You do not need to provide the existing failsafe account information to change it.

Note

The information that you use to configure the failsafe account cannot be recovered by Extreme Networks. Technical support cannot retrieve passwords or account names for this account. Protect this information carefully.