Configuring The Enable And Enable Secret Passwords - Cisco ASR 1001-X Hardware Installation Manual

Using the Cisco IOS-XE CLI--Manual Configuration

Configuring the Enable and Enable Secret Passwords

To provide an additional layer of security, particularly for passwords that cross the network or are stored on
a TFTP server, you can use either the enable password command or enable secret command. Both commands
accomplish the same thing—they allow you to establish an encrypted password that users must enter to access
privileged EXEC (enable) mode.
We recommend that you use the enable secret command because it uses an improved encryption algorithm.
For more information, see the "Configuring Passwords and Privileges" chapter in the
Configuration Guide
on Cisco Routers
Note If you configure the enable secret command, it takes precedence over the enable password command;
the two commands cannot be in effect simultaneously.
SUMMARY STEPS
1. enable
2. configure terminal
3. enable secret password
4. end
5. enable
6. end
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Router> enable
Step 2 configure terminal
Example:
Router# configure terminal
Step 3 enable secret password
Example:
Router(config)# enable secret greentree
Cisco ASR 1001-X Router Hardware Installation Guide
56
. Also see the Cisco IOS Password Encryption Facts
tech note.
Cisco ASR 1001-X Router Power Up and Initial Configuration
tech note and the
Purpose
Enables privileged EXEC mode.
• Enter your password if prompted.
Enters global configuration mode.
Specifies an additional layer of security over the enable
password command.
Cisco IOS Security
Improving Security