Change admin password CIsco Catalyst 2960X

[LucaSamioloNemes]

Hello, I'm Luca.

I have a catalyst 2960x and I should change the admin password.

I have just followed the instructions described in the product manual, but continue to keep the old password.

If I use show config I see that the password is changed but if I try on more browers I have to use the old password.

I use the CLI interface to change this password.

Thank you very much for any help

Best regards,

Luca

[luis_cordova]

Hi @LucaSamioloNemes,

Could you show us the current settings of your device?

Regards

[LucaSamioloNemes]

A Print Screen? or a file?

[luis_cordova]

Hi @LucaSamioloNemes,

A print screen its ok.

Regards

[LucaSamioloNemes]

Ok. I will share it soon.

Thanks.

[LucaSamioloNemes]

Good morning,

in the attachment, show config of my switch.

Thank you.

Luca

[luis_cordova]

Hi @LucaSamioloNemes,

Queries:
Do you ask for the password when you try to connect with telnet?
The new password is TL! 2712 / am?
Do you ask for the old password when entering by telnet or to enter privileged mode?

Regards

[LucaSamioloNemes]

There, is the new password.

But if I try to log in through ip on browser or with console cable it wants the old password.

I don't understand: because it wants the old password if in the show config it shows the new password…

Thanks

[luis_cordova]

Hi @LucaSamioloNemes,

Query:

Did you change the password with the enable secret command as well?

Regards

[LucaSamioloNemes]

I follow this instructions:

Setting or Changing a Static Enable Password in this link

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_0100.html#task_1020679

[luis_cordova · Accepted solution]

Hi @LucaSamioloNemes,

Try entering this command:

(config)# enable secret TL!2712/am

Regards

[Richard Burts · Accepted solution]

I believe that Luis is on the right path. The issue here is that the switch has been configured with both enable password and enable secret. enable password was the older implementation and enable secret was introduced to increase the security. When both enable password and enable secret are present in the configuration then enable password is ignored and enable secret is used. So if the original poster wants the switch to require the new password it must be configured as enable secret. It does not matter what value is configured for enable password when enable secret is present.

HTH

Rick

[Richard Burts]

I am glad that our suggestions were helpful. Thank you for marking this question as solved. This will help other participants in the community to identify discussions which have helpful information. This question is about a subtle aspect of passwords in Cisco IOS and I believe that other participants will benefit from it.

HTH

Rick