When the device is turned to offline mode, it is required to set a strong password for the device after the first login. To
configure a strong password from the CLI, the username and password should follow the procedures listed below:
-
The username length is between 1 and 32 characters.
-
The password length should be from 8 to 120 characters.
-
The password must contain at least one uppercase character, one lowercase character, one digit, and one punctuation mark.
-
The password can contain alphanumeric characters and special characters (ASCII decimal code from 33 to 126), but the following
special characters are not permitted:
" [double quote]
' [single quote]
? [question mark]
-
The password should not contain three sequential characters.
-
The password cannot contain the same three characters consecutively.
-
The password cannot be the same as or the reverse of the username.
-
A new password cannot be the same as the current or existing password.
Example:
The default credential is,
username: Cisco
password: Cisco
enable password: Cisco
To reset the credential with strong password, use the following sample credentials.
username: demouser
password: DemoP@ssw0rd
enable password: DemoE^aP@ssw0rd
Example of configuring strong password from CLI.
Device# configure iotod-iw {offline}
Switching to IOTOD IW Offline mode...
Will switch from Provisioning Mode to IOTOD IW offline Mode, device need to reboot:Y/N?
Y
User access verification.
[Device rebooting...]
User Access Verification:
Username: Cisco
Password: Cisco
After first login, Please reset credentials
Current Password:Cisco
Current Enable Password:Cisco
New User Name:demouser
New Password:DemoP@ssw0rd
Confirm New Password:DemoP@ssw0rd
New Enable Password:DemoE^aP@ssw0rd
Confirm New Enable Password:DemoE^aP@ssw0rd
After credentials changed, Please re-login
User access verification
Username: demouser
Password: DemoP@ssw0rd
Device> enable
Password:DemoE^aP@ssw0rd
Device#
Note
|
In the above example, all passwords are in plain text. This is for demo purposes (sample credential). In real case or configuration,
they are hidden behind asterisks (*).
|