Cisco WS-C1912-A Hardware Installation Guide - Page 83

Configuring the Enable and Enable Secret Passwords, Restrictions, SUMMARY STEPS

Page 83 highlights

Chapter 5 Configuring the Router Performing the Initial Configuration on the Router Step 4 Command or Action Verify that the router prompt displays your new hostname. Purpose - Step 5 Example: myrouter(config)# end (Optional) Returns to privileged EXEC mode. Example: myrouter# end Configuring the Enable and Enable Secret Passwords To provide an additional layer of security, particularly for passwords that cross the network or are stored on a TFTP server, you can use either the enable password command or enable secret command. Both commands accomplish the same thing-they allow you to establish an encrypted password that users must enter to access privileged EXEC (enable) mode. We recommend that you use the enable secret command because it uses an improved encryption algorithm. Use the enable password command only if you boot an older image of the Cisco IOS software or if you boot older boot ROMs that do not recognize the enable secret command. For more information, see the "Configuring Passwords and Privileges" chapter in the Cisco IOS Security Configuration Guide. Also see the Cisco IOS Password Encryption Facts tech note and the Improving Security on Cisco Routers tech note. Restrictions If you configure the enable secret command, it takes precedence over the enable password command; the two commands cannot be in effect simultaneously. SUMMARY STEPS 1. enable 2. configure terminal 3. enable password password 4. enable secret password 5. end 6. enable 7. end OL-19084-02 Cisco 1900 Series Hardware Installation 5-9

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102

5-9
Cisco 1900 Series Hardware Installation
OL-19084-02
Chapter 5
Configuring the Router
Performing the Initial Configuration on the Router
Configuring the Enable and Enable Secret Passwords
To provide an additional layer of security, particularly for passwords that cross the network or are stored
on a TFTP server, you can use either the
enable password
command or
enable secret
command. Both
commands accomplish the same thing—they allow you to establish an encrypted password that users
must enter to access privileged EXEC (enable) mode.
We recommend that you use the
enable secret
command because it uses an improved encryption
algorithm. Use the
enable password
command only if you boot an older image of the Cisco IOS
software or if you boot older boot ROMs that do not recognize the
enable secret
command.
For more information, see the “Configuring Passwords and Privileges” chapter in the
Cisco IOS Security
Configuration Guide
. Also see the
Cisco IOS Password Encryption Facts
tech note and the
Improving
Security on Cisco Routers
tech note.
Restrictions
If you configure the
enable secret
command, it takes precedence over the
enable password
command;
the two commands cannot be in effect simultaneously.
SUMMARY STEPS
1.
enable
2.
configure
terminal
3.
enable password
password
4.
enable secret
password
5.
end
6.
enable
7.
end
Step 4
Verify that the router prompt displays your new
hostname.
Example:
myrouter(config)#
Step 5
end
Example:
myrouter# end
(Optional) Returns to privileged EXEC mode.
Command or Action
Purpose