Configuring A Password For Console Access - HP ProCurve 7000dl Series Basic Management And Configuration Manual

Replace <password> with any combination of up to 30 characters. Include the
Message Digest 5 (md5) option to encrypt the password.
For example, if you want to set the password as procurve, enter:
ProCurve(config)# enable password procurve
Because you did not include the md5 option, the password you entered is
stored as clear text and is displayed when you enter the show running-config
command, as shown below.
hostname "ProCurve"
enable password procurve
To encrypt the password so that it is not stored as clear text, use the md5
option. From the global configuration mode context, enter:
ProCurve(config)# enable password md5 procurve
The ProCurve Secure Router then uses the MD5 hashing algorithm to encrypt
the password so that it is not readable when it is transmitted across the wire
or when you display the running-config file. An encrypted password is dis-
played in the running-config as shown below:
hostname "ProCurveSR7203dl"
enable password md5 encrypted b46f9961af093fdfb9e177eda79

Configuring a Password for Console Access

If possible, you should place the ProCurve Secure Router in a locked room so
that unauthorized users do not have physical access to it. Restricting physical
access to the router helps prevent malicious or curious users from damaging
your WAN or LAN.
You can further protect the ProCurve Secure Router by configuring a pass-
word for console access. Then, if someone breaches the physical security you
have set up to protect the router, the console password prevents that person
from viewing information that is available at the basic mode context. Although
the basic mode offers only a limited number of commands, you can still enter
show commands and view some configuration information. For example, you
can view information about:
interfaces
event-history
Controlling Management Access to the ProCurve Secure Router
Securing Management Access to the ProCurve Secure Router
2-5