telnet password

[nnn_sss22]

Hello,

Please tell me, if we configure line vty password then it is not secure.

for example.

s1(config)# line vty 0 15

s1(config-line)# password 12345

s1(config-line)# login local

s1(config-line)# end

it is not secure.

if we create a user and then enable vty then is it secure for example

s1(config)# username admin secret 12345

s1(config)# line vty 0 15

s1(config-line)# login local

s1(config-line)# exit

this is secure method???

[Julio E. Moisa · Accepted solution]

Hi 

Telnet is not secure because the password information is sent as plain text, so if there is a sniffer or Man in the middle attack, this information can be exposed, the suggestion is use SSH instead Telnet.

Enable secret provides MD5 hash so your password is hidden.

Now if you want to encrypt your local passwords in order to avoid be visible you can use this command.

service password-encryption

It will encrypt your current and new passwords.

It is an interesting link:

https://www.reading.ac.uk/internal/its/help/its-help-pcsecurity/its-pcsecurity-ssh.aspx

Hope it is useful

:-) 

[nnn_sss22]

But which example i have wrote. I did not set vty password. I have set user name secret key. Plz check it. Is it secure now?

[Julio E. Moisa]

Hi

Apologies, yes it is secure, it will provide MD5 encryption to the password and it will be saved for the specific username.