Cisco Systems XR manual Secret 0 5 secret no secret 0 5 secret, SR-50

Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software

secret

secret

To create a secure login secret for a user, use the secret command in username or line configuration mode. To remove the secure secret, use the no form of this command.

secret {0 5} secret no secret {0 5} secret

Syntax Description	0	Specifies that an unencrypted (clear text) secure secret follows.
	5	Specifies that an encrypted secure secret follows.
	secret	Character-string secret to be entered by the user to log in.

Defaults

Command Modes

Command History

No password is specified.

Username configuration

Line configuration

Release	Modification
Release 2.0	This command was introduced on the Cisco CRS-1.
Release 3.0	No modification.
Release 3.2	This command was supported on the Cisco XR 12000 Series Router.
Release 3.3.0	The password argument was replaced with the secret argument.

Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.

You can specify one of two types of secure secrets: encrypted or clear text.

When an EXEC process is started on a line that has password protection, the process prompts for the secret. If the user enters the correct secret, the process issues the prompt. The user can try three times to enter a secret before the process exits and returns the terminal to the idle state.

Secrets are one-way encrypted and should be used for applications such as login that do not need a decryptable secret.

Note The show running command does not display the login password in clear text when the 0 option is used to specify an unecrypted password.

Task ID	Task ID	Operations
	aaa	read, write

Cisco IOS XR System Security Command Reference

SR-50