Link to home
Start Free TrialLog in
Avatar of llandajuela
llandajuela

asked on

Cisco "line vty" password encryption

I need to know how to hide the "line vty" password from being shown after a "sh run" command.

thnks

ASKER CERTIFIED SOLUTION
Avatar of Les Moore
Les Moore
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of NetworkArchitek
NetworkArchitek

As far as I know the vty passwords are not encryptable, this is why you need to use "enable secret" for the password.
woops, sorry didn't see this was answered.
Avatar of llandajuela

ASKER

I thought that the "service password-encryption" command only sets the way the password is stored in the switch, but still was shown after showing the running-config.

As i can see, i was wrong. Thanks !!!
Just for the record and for future value of this question to others, here's the official command information:

To encrypt passwords, use the service password-encryption command in global configuration mode. To restore the default, use the no form of this command.

   service password-encryption

Usage Guidelines
The actual encryption process occurs when the current configuration is written or when a password is configured. Password encryption is applied to all passwords, including username passwords, authentication key passwords, the privileged command password, console and virtual terminal line access passwords, and Border Gateway Protocol neighbor passwords. This command is primarily useful for keeping unauthorized individuals from viewing your password in your configuration file.

When password encryption is enabled, the encrypted form of the passwords is displayed when a more system:running-config command is entered.