Is it possible to have a configuration that works with both? Whats the meaning of it? i have a router with the following conf.....whats the secruity implications? I see there is the type 7 passwords but there is also type 5. can you have both?
User Access Verification
Username: xxxxxxxx
Password:
xxxxxxxx#show run
xxxxxxxx#show running-config
Building configuration...
Current configuration : 19300 bytes
!
version 12.4
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug uptime
service timestamps log datetime
service password-encryption
!
hostname xxxxxxxx
!
boot-start-marker
boot system flash c3845-advipservicesk9-mz.1
boot-end-marker
!
security passwords min-length 6
enable secret 5 $1$DqHV$SqRyK1KBEjnWyzm0up
!
no aaa new-model
no network-clock-participate slot 1
no ip source-route
no ip gratuitous-arps
ip cef
!
!
no ip bootp server
!
voice-card 0
no dspfarm
!
username xxxxxxxx privilege 15 password 7 020B054F180F0420
username xxxxxxxx privilege 6 password 7 08014F4C130F0C1205
username xxxxxxxx privilege 15 password 7 095F5B0711121641595D
!
!
no ip http server
ip http authentication local
no ip http secure-server
!
logging trap debugging
logging facility local3
logging 140.2.5.253
access-list 12 permit xx.xx.xx.xx
access-list 15 permit xx.xx.xx.xx 0.0.0.255
snmp-server engineID local 0000000011AA
snmp-server group XXX v3 auth notify *tv.FFFFFFFF.FFFFFFFF.FFFF
snmp-server group XXX v3 auth notify *tv.FFFFFFFF.FFFFFFFF.FFFF
snmp-server community public RO
snmp-server host xx.x.x.x. version 3 auth solaradmin
snmp mib community-map public engineid 8000000903000017590E8C20
!
control-plane
!
privilege exec level 6 traceroute
privilege exec level 6 ping
privilege exec level 6 show ip route
privilege exec level 6 show ip
privilege exec level 6 show interfaces
privilege exec level 6 show running-config
privilege exec level 6 show
privilege exec level 6 debug ip
privilege exec level 6 debug
!
line con 0
password 7 094F471A1A0A
login
stopbits 1
line aux 0
stopbits 1
line vty 0 4
access-class 15 in
privilege level 15
password 7 02050C4E080D16
login local
transport input telnet
!
scheduler allocate 20000 1000
!
end
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks Irmoore. I think im lost. What is the enable password? Is it like a root password in linux? Does it mean that users will not log in with their passwords(the ones that appear hashed in the config file)? Say my username is munya and my password is munya. I login with username: munya pword: munya Is there anyother password?
From what you are saying does it mean all users will be using 1 password? from the config i see only 1 enable secret password hash.
Please enlighten me. Clearly i have no clue.
NB. I hear that type 7 passwords are not safe because they can be easily decrypted. What can be done to make users passwords be encrypted using the type 5 (enable secret)?
Users log in to the router using their local username and password.
They are then at "user" level access to whatever their privilege level is.
Yes, "enable" is like root. A user can go from their user level to root level mode if they know the enable secret password.
Yes, type 7 is easily decrypted. Enable secret always uses type 5 which has not yet been cracked.
Yes, you can have usernames with type 5 password encryption. Use the word "secret" in place of "password":
username xxxxxxxx privilege 15 secret <secretpass>
Here's the sequence. You can tell the mode by the prompt:
Telnet to the router
Username: xxxxxx
password:xxxxx
router> (limited user mode)
router>enable
Password:secretpass
router# <full privilege mode>
Business Accounts
Answer for Membership
by: yolunga2000Posted on 2009-01-17 at 03:51:50ID: 23400512
Just to add......i hear that enable secret takes precedence over enable password. So in the above conf.....does it mean that the users with type 7 passwords wont be able to login?