Enable or No Enable

[Infuscomus]

I have come across 3 different CISCO devices (SW, FW and Router) which have a login system like the following:

One device requires username / password, then enable password.

Second device requires username / passwword and En is blank (pressing enter when En password is required works)

Third device requires username / password and directly enters En mode.

I want to make some order in this chaos, so that every device requires a separate En password (and maybe remove it from 1st one).

Can anyone explain what would be the best way to do this ?

Basically, I want to change the devices as following: The first device to directly enter En mode (like the 3rd does currently), the 3rd to ask for En password (like 1st one does) and the 2nd one to actually have a non-blank password (for this one I think I just have to set it and it should be fine).

[Julio E. Moisa]

Hi

I recommend to use enable secret <password>, it is like other security layer.  Is good idea to have a document (in Excel could be) with basic configuration to have a standard.

[Georg Pauwen · Accepted solution]

Hello,

the below will log you into exec mode directly without asking for authentication and authorization:

line con 0
 privilege level 15
line aux 0
 privilege level 15
line vty 0 15
 privilege level 15

The below will ask for username and password, then for 'enable' password:

enable password cisco
!
username test privilege 7 password 0 cisco
!
aaa new-model
aaa authentication login default group tacacs+ local
aaa authorization exec default group tacacs+ local

[Infuscomus]

Thanks, I remember it now.