2-25
Configuring Username and Password Security
Saving Security Credentials in a Config File
Storage States When Using Include-Credentials
The following table shows the states of several access types when the factory
default settings are in effect or when include-credentials is enabled or not
enabled.
Typ e Factory Default Include-Credentials
Enabled
Include-Credentials
Disabled but Active
No Include-
Credentials Executed
Manager/Operator
Passwords & port
access
Single set for switch
Stored outside
config
Not displayed in
config file
One set per stored config
Stored in config
Displayed in config
Same as include-
credentials enabled
Not displayed in config
One set for switch
No credentials
displayed in config
SSH Public Key One set for switch
Stored in flash
Not displayed in
config
One set per stored config
Stored in flash
Displayed in config
Same as include-
credentials enabled
Not displayed in config
One set for switch
No credentials
displayed in config
SNMPv3 auth and
priv
Stored in flash
Not displayed in
config
Stored in flash
Displayed in config
Same as include-
credentials enabled
Not displayed in config
No credentials
displayed in config
RADIUS & TACACS
keystrings
Not displayed in
config
Stored in flash
Displayed in config
Same as include-
credentials enabled
Not displayed in config
No credentials
displayed in config
Note: When no include-credentials store-in-config is executed, the switch is restored to its default state and only stores
one set of operator/manager passwords and SSH keys.