Cisco MDS / Nexus Switch

01

Local Administrator/User Password

cisco-mds-nexus / local-admin-password

Cisco MDS and Nexus NX-OS switches use local users for console, SSH, Telnet where enabled, NX-API, and management access. Initial setup requires creating or setting the admin password.

user definedgenerated on installsecretusername/password

Looks like

pattern

NX-OS local user password line in configuration

^username \S+ password (5|8|9|0)? ?[^\r\n]+

pattern

NX-OS local user role assignment line near credential configuration

^username \S+ role \S+

Location

config file

running-config, startup-config, checkpoint.cfg

running-config/startup-config user and AAA configuration

public interface

console, SSH, NX-API, HTTPS, and management VRF services

artifact

configuration backups, tech-support bundles, and golden configs

source code

network automation templates and lab configs

artifact

show-running-config.txt, show-startup-config.txt, show-tech-support.txt, checkpoint.cfg

Common exported NX-OS/MDS configuration and support artifacts

Notes

No universal Nexus/MDS admin password is modeled; platforms prompt for an admin password during first boot or setup.

02

cisco-mds-nexus / nx-api-token-cookie

NX-OS NX-API and RESTCONF-style clients authenticate over HTTPS and may use Basic credentials, cookies, or session tokens for automation.

generated on installuser definedsecrettoken

http header

Authorization

Basic or token-style credentials used by NX-API clients

http header

Cookie

NX-API web/API session cookie

config file

running-config, startup-config, checkpoint.cfg

Ansible, Terraform, Nornir, and custom automation configs

secret store

CI/CD variables and network automation vaults

logs

NX-API HTTP traces and automation debug logs

03

AAA / SNMP Shared Secrets

cisco-mds-nexus / aaa-snmp-secrets

NX-OS configurations store RADIUS/TACACS+ shared keys, LDAP integration settings, SNMP communities/users, and local fallback credentials.

user definedsecretsecret value

Looks like

pattern

NX-OS AAA server shared key line

^\s*(radius-server|tacacs-server) key (0|7|6)? ?[^\r\n]+

pattern

SNMPv1/v2c community string line in NX-OS configuration

^snmp-server community \S+

Location

config file

running-config, startup-config, checkpoint.cfg

NX-OS AAA, SNMP, and management configuration

artifact

configuration backups, checkpoint archives, and tech-support files

source code

network-as-code repositories and monitoring templates

artifact

show-running-config.txt, show-startup-config.txt, show-tech-support.txt, checkpoint.cfg

Common exported NX-OS/MDS configuration and support artifacts

04

Fibre Channel, FCSP, and IPsec Secrets

cisco-mds-nexus / fc-vsan-and-ipsec-secrets

Cisco MDS/Nexus storage/network configurations can include Fibre Channel Security Protocol credentials, DH-CHAP secrets, IPsec/IKE pre-shared keys, and routing protocol authentication keys.

user definedsecretsecret value

Looks like

pattern

NX-OS/MDS config fragments indicating FCSP, routing, or VPN shared secret context

(dhchap|fcsp|key-chain|pre-shared-key|isakmp key)

Location

config file

running-config, startup-config, checkpoint.cfg

MDS FCSP/DH-CHAP, VSAN, key-chain, routing, and crypto configuration

artifact

fabric configuration backups and migration bundles

secret store

network automation vaults and storage fabric password stores

artifact

show-running-config.txt, show-startup-config.txt, show-tech-support.txt, checkpoint.cfg

Common exported NX-OS/MDS configuration and support artifacts

Local Administrator/User Password

Looks like

Location

Notes

NX-API Session Cookie / Token

Location

AAA / SNMP Shared Secrets

Looks like

Location

Fibre Channel, FCSP, and IPsec Secrets

Looks like

Location

Authorized use