Encrypt Password Cisco



In Cisco IOS, there are two type of standar security password and secret. The difference of the two are encryption. When you check running config, you can differ that passwod is plaintext and secret is encrypted.













In other hand, cisco gives facility too encrypt this plaintext security uses service password-encryption command. Try to follow the instruction

router#configure terminal
router(config)#service password-encryption

But, you have to know that people out there have known the secret of this encryption. They can copy the password and then paste to crecker and it can unecrypt the password. So be carefull to choose standard security.

Thanks to sources:
dancourses

Comments

Post a Comment

Popular posts from this blog

Virtual Teletype for Telnet and SSH

Talk about devices configuration (router, switch, hub, server), for the first time, all of them have to be configured directly via console before it can be reconfigured or managed remotely via Telnet or SSH. In order to manage device remotely, first, we have to create gate at the device. In this case, we have something named vty or virtual teletype. Actually, This gate has axis in the router or switch but if we don’t set the password of them we will be rejected automatically by the device when we try to access to them via Telnet or SSH. “ Virtual teletype ( VTY ) is a command line interface (CLI) created in a router and used to facilitate a connection to the daemon via Telnet, a network protocol used in local area networks.” (techopedia.com) Let’s get started to configure the vty. It is very simple actually, just enter to global configuration and then execute line vty than set the password. router>enable router#configure terminal router(config)#line vty 0 5 rou...
Read more

Local Login Security Global security

In this tutorial, I would like to introduce you to global security configuration. This is the configuration that can be used to all over security access like vty, console, and auxiliary. First, let’s set the securtiy than we implement to the line accesses. Router#configuration terminal Router(config)#username cisco password cisco Router(config)#username cisco privilege 2 That’s all. Now, You can use this security configuration as global configuration for vty (telnet or ssh), auxiliary, and console. Enter the line configuration and use login local as login security. router#configuration terminal router(config)#line vty 0 5 router(config-line)#login local the procedure is same for auxiliary and console, you just enter to the line than set login to login local router#configuration terminal router(config)#line console 0 router(config-line)#login local router#configuration terminal router(config)#line aux 0 router(config-line)login local Now,...
Read more