System Security
nv show system security
Shows security settings on the switch.
Version History
Introduced in Cumulus Linux 5.9.0
Example
cumulus@switch:~$ nv show system security
operational applied
------------------------- ----------- -------
password-hardening
state enabled enabled
reject-user-passw-match enabled enabled
lower-class enabled enabled
upper-class enabled enabled
digits-class enabled enabled
special-class enabled enabled
expiration-warning 15 15
expiration 180 180
history-cnt 10 10
len-min 8 8
nv show system security ca-certificate
Shows all the CA certificates on the switch.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security ca-certificate
nv show system security ca-certificate <cert-id>
Shows brief information about a specific CA certificate.
Command Syntax
| Syntax | Description |
|---|---|
<cert-id> |
The CA certificate name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security ca-certificate cert-1
nv show system security ca-certificate <cert-id> dump
Shows detailed information about a specific CA certificate.
Command Syntax
| Syntax | Description |
|---|---|
<cert-id> |
The CA certificate name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security ca-certificate cert-1 dump
nv show system security certificate
Shows all the entity certificates on the switch.
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security certificate
nv show system security certificate <cert-id>
Shows brief information about a specific entity certificate.
Command Syntax
| Syntax | Description |
|---|---|
<cert-id> |
The certificate name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security certificate cert-2
nv show system security certificate <cert-id> dump
Shows detailed information about a specific entity certificate.
Command Syntax
| Syntax | Description |
|---|---|
<cert-id> |
The certificate name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security certificate cet2 dump
nv show system security certificate <cert-id> installed
Shows the applications that are using a specific entity certificate.
Command Syntax
| Syntax | Description |
|---|---|
<cert-id> |
The certificate name. |
Version History
Introduced in Cumulus Linux 5.7.0
Example
cumulus@switch:~$ nv show system security certificate cert-2 installed
nv show system security encryption
Shows if NVUE password encryption is enabled, By default, NVUE encrypts passwords, such as the RADIUS secret, TACACS secret, BGP peer password, OSPF MD5 key, and SNMP strings in the startup.yaml file.
Version History
Introduced in Cumulus Linux 5.10.0
Example
cumulus@switch:~$ nv show system security encryption
operational applied
------- ----------- -------
db
state enabled
nv show system security encryption db
Shows if NVUE password encryption is enabled, By default, NVUE encrypts passwords, such as the RADIUS secret, TACACS secret, BGP peer password, OSPF MD5 key, and SNMP strings in the startup.yaml file.
Version History
Introduced in Cumulus Linux 5.10.0
Example
cumulus@switch:~$ nv show system security encryption db
operational applied
----- ----------- -------
state enabled enabled
nv show system security password-hardening
Shows the currently configured password policies for the switch.
Version History
Introduced in Cumulus Linux 5.9.0
Example
cumulus@switch:~$ nv show system security password-hardening
operational applied
----------------------- ----------- --------
state enabled enabled
reject-user-passw-match disabled disabled
lower-class enabled enabled
upper-class enabled enabled
digits-class disabled disabled
special-class disabled disabled
expiration-warning 15 15
expiration 180 180
history-cnt 20 20
len-min 8 8