Cisco Systems ISR4451XK9 manual Configuring the Enable and Enable Secret Passwords

Chapter 4 Initial Configuration

Performing the Initial Configuration on the Router

Configuring the Enable and Enable Secret Passwords

To provide an additional layer of security, particularly for passwords that cross the network or are stored on a TFTP server, you can use either the enable password command or enable secret command. Both commands accomplish the same thing—they allow you to establish an encrypted password that users must enter to access privileged EXEC (enable) mode.

We recommend that you use the enable secret command because it uses an improved encryption algorithm. Use the enable password command only if you boot an older image of the Cisco IOS XE software.

For more information, see the “Configuring Passwords and Privileges” chapter in the Cisco IOS Security Configuration Guide. Also see the Cisco IOS Password Encryption Facts tech note and the Improving Security on Cisco Routers tech note.

Restrictions

If you configure the enable secret command, it takes precedence over the enable password command; the two commands cannot be in effect simultaneously.

SUMMARY STEPS

1.enable

2.configure terminal

3.enable password password

4.enable secret password

5.end

6.enable

7.end

DETAILED STEPS

	Command or Action		Purpose
Step 1
	enable		Enables privileged EXEC mode.
			• Enter your password if prompted.
	Example:
	Router> enable
Step 2
	configure terminal		Enters global configuration mode.
	Example:
	Router# configure terminal
Step 3
	enable password password		(Optional) Sets a local password to control access to various
			privilege levels.
	Example:		• We recommend that you perform this step only if you
	Router(config)# enable password pswd2		boot an older image of the Cisco IOS-XE software or if
			you boot older boot ROMs that do not recognize the
			enable secret command.
		Hardware Installation Guide for the Cisco 4451-X Integrated Services Router
OL-27644-01				4-7