Enabling the FIPS mode

You must reboot the switch after you enable or disable the FIPS mode to make your configuration take effect. If you change the FIPS mode for an IRF fabric, you must reboot all IRF member devices.

After you change the switch to operate in FIPS mode, local Telnet users in previous non-FIPS cannot log into the switch.

Do not disable the password control function when the switch operates in FIPS mode. Otherwise, users might be unable to log in.

To enable the FIPS mode:

Step

Command

Remarks

1. Enter system view.

system-view

N/A

2. Enable the FIPS mode.

fips mode enable

Disabled by default.