Cisco Systems IE 2000 Protecting Enable and Enable Secret Passwords with Encryption, Disabling Password Recovery

12-27
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 12 Configuring Switch-Based Authentication
How to Configure Switch-Based Authentication
Protecting Enable and Enable Secret Passwords with Encryption
Disabling Password Recovery
Command Purpose
Step 1 configure terminal Enters global configuration mode.
Step 2 enable password [level level] {password |
encryption-type encrypted-password}
or
enable secret [level level] {password |
encryption-type encrypted-password}
Defines a new password or changes an existing password for
access to privileged EXEC mode.
or
Defines a secret password, which is saved using a
nonreversible encryption method.
• (Optional) level—Specifies the range is from 0 to 15.
Level 1 is normal user EXEC mode privileges. The
default level is 15 (privileged EXEC mode privileges).
• password—Specifies a string from 1 to 25 alphanumeric
characters. The string cannot start with a number, is case
sensitive, and allows spaces but ignores leading spaces.
By default, no password is defined.
• (Optional) encryption-type—Only type 5, a Cisco
proprietary encryption algorithm, is available. If you
specify an encryption type, you must provide an
encrypted password—an encrypted password that you
copy from another switch configuration.
Note If you specify an encryption type and then enter a
clear text password, you cannot reenter privileged
EXEC mode. You cannot recover a lost encrypted
password by any method.
Step 3 service password-encryption (Optional) Encrypts the password when the password is
defined or when the configuration is written.
Encryption prevents the password from being readable in the
configuration file.
Step 4 end Returns to privileged EXEC mode.
Command Purpose
Step 1 configure terminal Enters global configuration mode.
Step 2 no service password-recovery Disables password recovery.
This setting is saved in an area of the flash memory that is accessible by
the boot loader and the Cisco IOS image, but it is not part of the file
system and is not accessible by any user.
Step 3 end Returns to privileged EXEC mode.
Step 4 show version Verifies the configuration by checking the last few lines of the command
output.