username

Description

Within the EST profile context, configures the user account information for the EST server that is used to authenticate the switch before accepting requests from the switch. This is not configured by default. Any existing username and password is replaced by this command.

The no form of this command removes the user account information within the selected EST profile.

There are two ways the EST client on a CX switch can prove itself to an EST server: a certificate, and/or username and password. At least one of the two must be configured for the EST request to succeed. If both are configured, certificate authentication will be used. If a certificate is not configured or certificate authentication fails, and username and password is configured, the username and password will be sent to the EST server for authentication.

Command context

config-est-

Parameters

Specifies the EST server account user name. The exact user name requirements are set by the chosen EST service. Range: Up to 32 alphanumeric characters.

ciphertext

Specifies the EST server account password as Base64 ciphertext. No password prompts are provided and the ciphertext password is validated before the configuration is applied for the user.

NOTE:The ciphertext password must be gotten from the EST service.

plaintext

Specifies the password without prompting. The password is visible as cleartext when entered but is encrypted thereafter. The exact password requirements are set by the chosen EST service. Range: Up to 64 alphanumeric characters.

Authority

Administrators or local user group members with execution rights for this command.

Examples

配置一个用户与提示cleartext password entry :

switch(config)#crypto pki est-profile EST-service1switch(config-est-EST-service1)#username est1 passwordEnter password:********Confirm password:********switch(config-est-EST-service1)#

Configuring an EST user with direct cleartext password entry:

switch(config)#crypto pki est-profile EST-service2switch(config-est-EST-service2)#username est1 password plaintext concept_leap739

Configuring an EST user with ciphertext password entry :

switch(config)#crypto pki est-profile EST-service3switch(config-est-EST-service3)#username est1 password ciphertextAQBpRALpWYm2z7L1LanOtR3vGkqhN1hBU2CuvQXUF/ggYgAAAHWaPqxU6nAnGTnKq49P4cdNQ6U qPbjHL4XzO0T04djkUPKGfnsWuFEONveh+JbEobq63+1k80qBKImfwJjc3eWHiaUbeNpPx2zN2Q 1DdyxAAQi4rmKr8LITMTTMd7qr

Removing the EST user account information for EST profile EST-service2:

switch(config)#crypto pki est-profile EST-service2switch(config-est-EST-service2)#没有用户名