Skip to content

Commit ffb7e4b

Browse files
committed
corrected the blocking issues
1 parent 3da1e17 commit ffb7e4b

File tree

4 files changed

+16
-13
lines changed

4 files changed

+16
-13
lines changed

articles/operator-nexus/TOC.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -193,8 +193,8 @@
193193
href: howto-replace-network-devices.md
194194
- name: How to put a device into maintenance mode
195195
href: howto-put-device-in-maintenance-mode.md
196-
- name: How to setup break glass access
197-
href: howto-setup-break-glass-access-.md
196+
- name: How to set up break glass access
197+
href: howto-set-up-break-glass-access.md
198198
- name: How to use-break-glass-access.md
199199
href: howto-use-break-glass-access.md
200200
- name: How to enable-Micro-BFD on CE and PE devices.md

articles/operator-nexus/howto-enable-micro-bfd.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: How to enable Micro-BFD on CE and PE devices
3-
description: Process of enabling Micro-BFD On CE and PE devices .
3+
description: Process of enabling Micro-BFD On CE and PE devices.
44
author: sushantjrao
55
ms.author: sushrao
66
ms.service: azure-operator-nexus
@@ -15,13 +15,16 @@ Micro-BFD (Bidirectional Forwarding Detection) is a lightweight protocol designe
1515

1616
## Prerequisites
1717

18-
Before enabling Micro-BFD, ensure the following:
18+
Before enabling Micro-BFD, perform the following steps:
1919

2020
- Both CE and PE devices are configured with the required Micro-BFD settings.
2121

22-
- The feature flag `MicroBFDEnabled` is turned off by default. To enable it, please contact Microsoft support through a support incident.
22+
- The feature flag `MicroBFDEnabled` is turned off by default.
2323

24-
- Need to [put the device in maintenance mode](.\howto-put-device-in-maintenance-mode.md) for below configuration changes.
24+
> [!Note]
25+
> Contact Microsoft support through a support incident to enable the feature flag.
26+
27+
- It is necessary to [put the device in maintenance mode](.\howto-put-device-in-maintenance-mode.md) to apply below the configuration changes.
2528

2629
## Configuration steps
2730

articles/operator-nexus/howto-setup-break-glass-access-.md renamed to articles/operator-nexus/howto-set-up-break-glass-access.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -17,30 +17,30 @@ For Network Fabric environments, the current break-glass model, known as Method
1717

1818
- **Strict access control**: Customer administrators control access through individual assignments instead of shared accounts.
1919

20-
- **Strong authentication**: Break-glass access is managed via Microsoft Entra with Multi-Factor Authentication (MFA) eliminating local account dependencies.
20+
- **Strong authentication**: Break-glass access is managed via Microsoft Entra with multifactor authentication (MFA) eliminating local account dependencies.
2121

2222
- **Enhanced security**: All access attempts are logged for audit and investigation purposes.
2323

2424
## FIDO2 token
2525

26-
In the Method D v2.0 model, break-glass users uses a FIDO2 token to create and upload a public key linked to their Entra identity. This provides secure SSH access to Fabric devices. Entra RBAC manages authorization, allowing administrators to assign appropriate access levels to users.
26+
In the Method D v2.0 model, break-glass users uses a FIDO2 token to create and upload a public key linked to their Entra identity. This configuration provides secure SSH access to Fabric devices. Entra Role-Based Access Control (RBAC) manages authorization, allowing administrators to assign appropriate access levels to users.
2727

2828
For offline accessibility, usernames, public keys, and permissions are pre-provisioned on all the Network Fabric devices, allowing break-glass SSH login without requiring an active Azure connection.
2929

30-
Each FIDO2 token serves usually as a physical USB device, offering unphishable, multi-factor authentication through user presence and PIN verification.
30+
Each FIDO2 token serves usually as a physical USB device, offering unphishable, multifactor authentication through user presence and PIN verification.
3131

3232
## Method D v2.0 setup and operations
3333

3434
This guide is divided into two sections
3535

36-
1. **Method D v2.0 infrastructure setup** - Mandatory for both existing and new NF deployments running Runtime Fabric version 4.0.0.
36+
1. **Method D v2.0 infrastructure setup** - Mandatory for both existing and new Network Fabric (NF) deployments running Runtime Fabric version 4.0.0.
3737

38-
2. [**Using Method D v2.0 breakglass access**](howto-use-break-glass-access.md)
38+
2. [**Using Method D v2.0 break glass access**](howto-use-break-glass-access.md)
3939

4040

4141
### Method D v2.0 infrastructure setup
4242

43-
This guide provides an overview of the infrastructure setup mandatory for both existng and new deployments which will be using NF Runtime version 4.0.0.
43+
This guide provides an overview of the infrastructure setup that is mandatory for both existing and new deployments using NF Runtime version 4.0.0.
4444

4545
#### Step 1: Register NexusIdentity Resource Provider
4646

articles/operator-nexus/howto-use-break-glass-access.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -107,7 +107,7 @@ Once these roles are assigned, the corresponding username and public SSH key wil
107107
> [!Note]
108108
> break glass user accounts are reconciled every 4 hours. For immediate reconciliation, open a support ticket with the network fabric support team.
109109
110-
## 3. Break-glass access to Network Fabric device
110+
## Break-glass access to Network Fabric device
111111
112112
Once permissions are granted, users can access network fabric devices with their FIDO-2 hardware token (for example, YubiKey). Follow the steps below to use break glass access.
113113

0 commit comments

Comments
 (0)