Cisco AS5800 Specifications download pdf (Page 163)

4-25

Cisco AS5800 Operations, Administration, Maintenance, and Provisioning Guide

DOC-7810814=

Chapter 4 Administration

Access Service Security

Securing Access to Privileged EXEC and Configuration Mode

The first step is to secure access to privileged EXEC (enable) mode. Enable mode provides access to

configuration mode, which enables any type of configuration change to the Cisco AS5800. To secure

privileged EXEC mode access, use one of the following commands.

• The enable password password command requires that network administrators enter a password to access

privileged EXEC mode. Do not provide access to users who are not administrators.

•

The enable secret password command specifies a secret password that is encrypted, so that the password

cannot be read when crossing a network. After you issue this command, the encryption cannot be reversed.

The enable secret password takes precedence over the enable password when it exists. The same

password cannot be used for both commands. You can view the encrypted version of the enable secret

password using the show running-config or show startup-config commands. (The encrypted version

of the password is noted with * in the following example.)

5800-1(config)# show running-config

Using 1899 out of 126968 bytes

Version x AA

hostname 5800-1

enable secret 5 $1$60L4$X2JYOwoDc0.kqa1lo0/w8/*

Note For more information about the enable password and enable secret commands and their

complete syntax, refer to the security command reference for your Cisco IOS release in the

Cisco IOS configuration guides and command references documentation.

Caution If you use the enable secret command and specify an encryption type, you must enter the

encrypted version of a specific password. Do not enter the cleartext version of the password

after specifying an encryption type, otherwise you will be locked out of privileged EXEC

(enable) mode. To regain access to privileged EXEC mode, erase the contents of NVRAM

and your entire configuration, and reconfigure the Cisco AS5800.

Note The enable secret password overrides the enable password.

The following global configuration commands provide an encrypted password using enable secret.

1 2 ... 158 159 160 161 162 163 164 165 166 167 168 ... 333 334

No comments

Cisco AS5800 Specifications Page 163