Secrets In Scripts - Hirschmann RS20 Reference Manual

Command Structure

1.1.7 Secrets in scripts

A configuration may include secrets (e. g., passwords). When creating a
script, these secrets are written to it in a scrambled form, not in clear text.
These secrets may be up to 31 characters long. The format for a scrambled
secret is: ":v1:<scrambled secret>:" (without the quotes ("), they were added
for readability). v1 denotes the scrambling method (v1 in this case), the value
of the scrambled secret is a 64-digit hex string.
The following commands produce scrambled secrets (if necessary):
Command
radius server key acct <ip> <password>
radius server key auth <ip> <password>
users passwd <username> <password>
users snmpv3 encryption <username> des <password>
Tab. 2: Commands in Global Config mode
Applying or validating a script requires the following conditions for a scram-
bled secret, else it will be considered invalid (usually only relevant if a script
is edited manually):
D
string must not be longer than 64 hex digits
D
string must only contain the digits 0-9 and the characters A-F (or a-f)
D
string length must be even
24
1.1 Format
Note
Release 8.0 05/2013
CLI L2E