Cisco IOS : How to encrypt passwords on a switch or router.

We have seen how to set passwords on cisco switches or routers here. Of course setting passwords does add to the security of the device but there is small problem. The password is stored in plain text.  Anyone who gets access to the switch can easily see all the passwords by typing command show running-config or show startup-config.

Image

Encrypting passwords can further enhance the security of the device. Privileged password can be encrypted by using the command enable secret instead of enable password. This command should be set from privileged global configuration mode.

Image

Lets see what can we see  when we use the command show running-config.

Image

We can see that the password we set has been encrypted. but what about other passwords. The  console, auxiliary and vty lines passwords cannot be encrypted even if we use enable secret command. To encrypt those passwords, we have to use another command service password-encryption as shown below.

Image

This command will encrypt all the passwords stored in plain text on the device.

About these ads

Comment on this article.

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 159 other followers

%d bloggers like this: