Username privilege after VxWorks to IOS migration using WLSE2.5

tladeal1 · ‎01-26-2004

We have a problem to apply a template to an AP that we migrated from VxWorks to IOS.

Here is the description of the problem

1) Migrate an VxWorks 350 or 1200 access point to IOS

using WLSE 2.5 and the corresponding Helper Image.

On the VxWorks configuration we have only one username with the next capability settings:

username: apadnms

Capability settings: Write, SNMP, Ident, Firmware and Admin

2) When migrated in IOS, the next username and password are defined in the IOS configuration

enable secret 5 xxxxxxxxxxx

username apadnms privilege 15 password 7 xxxxxxxxxxxxx

the privilege 15 means that we directly access to the privileged mode.

To login the access point we have to use the next sequence:

Username: apadnms

Password:

AP1200-TEST_IOS_3# <--- privileged mode without enable cmd

3) This login sequence is not available on the WLSE2.5 telnet credentials.

http://www.cisco.com/univercd/cc/td/doc/product/rtrmgmt/cwparent/cw_1105/wlse/2_5/ts_gd/faqs.htm#95019

We are for this reason not able to use the WLSE to apply a configuration template to the converted APs.

To be able to apply a template, we previously have to MANUALLY update the AP configuration with:

no username apadnms

username apadnms password 7 xxxxxxxxxxxxx

The login sequence is then:

Username: apadnms

Password:

AP1200-TEST_IOS_3>enable

Password:

AP1200-TEST_IOS_3#

This sequence is working fine with the WLSE credentials.

Can somebody help?

rmushtaq · ‎01-26-2004

The login sequence as mentioned in 2) above should also work with WLSE 2.5, in the WLSE Telnet/SSH Credentials, for this sequance, you will need to enter the AP telnet Username and Password in the corresponding WLSE User Name

User Password and Confirm Password fields. Since the AP does not have any Enable password configured, you'd need to leave the Enable Password and Confirm Enable Password fields blank.

tladeal1 · ‎01-29-2004

Yes it works, but it means that we have to change the Telnet credentials on the whole WLSE. This is not possible on a productive WLSE, because all the other jobs on the ap that require the enable password will fail.