You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Breakglass access using Method D v2.0 is a streamlined approach for administrators to grant secure, emergency access to critical network fabric devices. This guide will walk you through setting up and using Breakglass access, including generating SSH keys, granting permissions, and accessing network fabric devices.
14
15
15
16
## Generating SSH Keys Using the Nexusidentity Azure CLI
@@ -68,12 +69,14 @@ To start with Breakglass IAM configuration, you will need to set up SSH keys usi
68
69
69
70
e. During this process:
70
71
71
-
- If prompted to overwrite keys, press **Enter**.
72
+
- If prompted to overwrite keys in token, press **Enter**.
72
73
73
74
- Select the **Security Key** in the popup window and follow the prompts.
74
75
75
76
- Enter your **YubiKey PIN** and touch the device when prompted.
76
77
78
+
- If prompted to overwrite keys- press **Enter**
79
+
77
80
- If prompted to enter a passphrase, press **Enter**.
78
81
79
82
f. After successful key generation, you should see:
@@ -84,7 +87,7 @@ To start with Breakglass IAM configuration, you will need to set up SSH keys usi
84
87
85
88
## Granting break-glass permissions to an Entra user on a Network Fabric
86
89
87
-
To enable Breakglass access for an Entra user on a network fabric, assign the appropriate roles to the user. Below are the role options and their permissions:
90
+
To enable Breakglass access administrator can assign below roles to Entra users on a Network Fabric device.
88
91
89
92
- **Nexus Network Fabric Service Reader**:
90
93
@@ -111,7 +114,7 @@ Once permissions are granted, users can access network fabric devices with their
111
114
112
115
2. **Use SSH with the `-J` option**:
113
116
114
-
- The `-J` option enables you to log in through a jump server and access a fabric device directly. This involves authentication through both the jump server and the fabric device using SSH keys.
117
+
- The `-J` option enables you to log in through a jump server and access a fabric device directly. This involves authentication first with the jump server and then with the fabric device (using ssh keys).
115
118
116
119
Use the following command format to access a fabric device:
0 commit comments