IOS line password encryption

[cbouwhuis]

Since IOS 15.3(3)M the type 8 and type 9 password encryption is supported. However as far as I can find this only is applicable for enable secret passwords and local database password in combination with "username ...." configurations.

Is it also possible to change the current type 7 password encryption on the line (VTY, CON and AUX) ports? 

[Georg Pauwen]

Hello,

I think type 8 and 9 are indeed only available in combination with enable secret and usernames.

That said, what are the line password options after you turn 'password encryption on' globally ?

[cbouwhuis]

Georg, as far as I can see there are no options in the line password config. I can only set the password which is shown as a type 7 when you do a show running-config.

[Georg Pauwen]

Hello,

even with password encryption on globally ?

Router#conf t

Router(config)#password encryption on

If there are no options, you are stuck with type 7 for vty, con, and aux...

[cbouwhuis]

yes, service password-encryption is configured. I think indeed there is no way to change the encryption type on the line configuration.

[Georg Pauwen]

Hello,

the command 'password encryption on' is not available in your IOS ?

[cbouwhuis]

yes, it is configured