Questions about configuring passwords ...

[rezaalikhani]

RAS-ROUTER:(config)#enable secret ?

0

5

LINE

whats the difference between using the number '0' and then typing the password from just typing the acctual password?

Thanks

[spremkumar]

hi

AFAIK u can enter the unecrypted string as the password after keying in 0 which we does normally when configuring the password.

which it does enrypt using md5 algorithm and displays in the running config.

Router(config)# enable secret cisco

Router# show running-config

!

version 12.1

no service single-slot-reload-enable

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

!

hostname CE

!

logging rate-limit console 10 except errors

no logging console

enable secret 0 $1$53Ew$Dp8.E4JGpg7rKxQa49BF9/

when u use keyword 5 in conjuntion with the command then u need to enter the encrypted keystring followed by 5.

regds

[rezaalikhani]

Thanks for your reply;

but wthat is the differenve between using the '0' field and using the 'LINE' field?

Thanks

[balajitvk]

There is no difference b/w them. They just used 0 for notation.

From the CLI help,

Switch(config)#enable secret ?

0 Specifies an UNENCRYPTED password will follow

5 Specifies an ENCRYPTED secret will follow

LINE The UNENCRYPTED (cleartext) 'enable' secret

level Set exec level password

Switch(config)#enable secret 0 ?

LINE The UNENCRYPTED (cleartext) 'enable' secret

Both will be same in effect.

I hope this clear your doubt!

[rezaalikhani]

Thank you for your good reply.

Another question. please look at the following output:

(config)#enable secret level 5 5 ?

LINE The ENCRYPTED 'enable' secret string

Please explain,why we use an encrypted password in the above situation when we are going to define a password?

Thanx

[groupcisco · Accepted solution]

Hi Reza,

Here incase if you are entering the password in an unsecure environment and you dont want anyone seeing you type to know the password you can use this mechanism. You can copy the encrypted password from the config file after the router has encrypted the file. Here 5 means that cisco is encrypting it using class 5 algorithm. There is also a class 7 algorithm.

Hope I have cleared your doubt.

rgds,

Naveen B

[rezaalikhani]

Yes, thanks