CISCO ACI Local credential creation

[Robo123]

Hi All,

Any one please help me with Local login credential creation & password recovery procedure in Cisco ACI via CLI.

[AshSe]

Hi @Robo123 

Here are the steps for creating local login credentials and performing password recovery in Cisco ACI via both the CLI and GUI.

Creating Local Login Credentials

Using the GUI:

1. Log in to the APIC GUI:

   • Open your web browser and log in to the APIC GUI using your admin credentials.

2. Navigate to User Management:

   • Go to Admin > AAA > Users.

3. Create a New User:

   • Click on the + (Add) button to create a new user.
   • Fill in the required details such as Username, Password, Confirm Password, and Role.
   • Assign the appropriate roles and permissions to the new user.
   • Click Submit to create the user.

Using the CLI:

1. Access the APIC CLI:

   • Connect to the APIC CLI via SSH.

2. Create a New User:

   • Use the following commands to create a new user:

     apic# conf t

     apic(config)# aaa user <username>

     apic(config-aaa-user)# password <password>

     apic(config-aaa-user)# role <role>

     apic(config-aaa-user)# commit

   • Replace <username>, <password>, and <role> with the appropriate values.

Password Recovery Procedure

Using the GUI:

1. Log in to the APIC GUI:

   • Open your web browser and log in to the APIC GUI using your admin credentials.

2. Navigate to User Management:

   • Go to Admin > AAA > Users.

3. Reset Password:

   • Select the user for whom you want to reset the password.
   • Click on the Reset Password button.
   • Enter the new password and confirm it.
   • Click Submit to apply the changes.

Using the CLI:

1. Access the APIC CLI:

   • Connect to the APIC CLI via SSH.

2. Reset Password:

   • Use the following commands to reset the password for a user:

     apic# conf t

     apic(config)# aaa user <username>

     apic(config-aaa-user)# password <new-password>

     apic(config-aaa-user)# commit

   • Replace <username> and <new-password> with the appropriate values.

Password Recovery for Admin User (if you are locked out)

If you are locked out and need to recover the admin password, you can use the following procedure:

1. Access the APIC Console:

   • Connect to the APIC console via a direct console connection or through a KVM.

2. Reboot the APIC:

   • Reboot the APIC and interrupt the boot process to access the bootloader.

3. Enter Single-User Mode:

   • In the bootloader, enter single-user mode by appending single to the boot parameters.

4. Reset the Admin Password:

   • Once in single-user mode, use the following commands to reset the admin password:

     mount -o remount,rw / passwd admin

   • Follow the prompts to enter and confirm the new password.

5. Reboot the APIC:

   • Reboot the APIC to apply the changes.

By following these steps, you can create local login credentials and perform password recovery in Cisco ACI via both the CLI and GUI. If you encounter any issues, refer to the official Cisco documentation or contact Cisco support for further assistance.

AshSe

Please rate this post if it was helpful; your feedback is appreciated!