Secret - Cisco CRS User Manual

Authentication, Authorization, and Accounting Commands

secret

To configure an MD5-encrypted secret to be associated with an encrypted username, use the secret command
in username configuration mode or line template configuration mode. To remove the secure secret, use the
no form of this command.
secret {[0] secret-login| 5 secret-login}
no secret {0| 5} secret-login
Syntax Description
0
5
secret-login
Command Default
No password is specified.
Command Modes
Username configuration
Line template configuration
Command History
Release
Release 2.0
Release 3.3.0
Usage Guidelines
Cisco IOS XR software allows you to configure Message Digest 5 (MD5) encryption for username logins
and passwords. MD5 encryption is a one-way hash function that makes reversal of an encrypted password
impossible, providing strong encryption protection. Using MD5 encryption, you cannot retrieve clear-text
passwords. Therefore, MD5 encrypted passwords cannot be used with protocols that require the clear-text
password to be retrievable, such as Challenge Handshake Authentication Protocol (CHAP).
You can specify one of two types of secure secret IDs: encrypted (5) or clear text (0). If you do not select
either 0 or 5, the clear-text password you enter is not be encrypted.
OL-24740-01
(Optional) Specifies that an unencrypted (clear-text) password follows. The password will
be encrypted for storage in the configuration using an MD5 encryption algorithm. Otherwise,
the password is not encrypted.
Specifies that an encrypted MD5 password (secret) follows.
Text string in alphanumeric characters that is stored as the MD5-encrypted password
entered by the user in association with the user's login ID.
Can be up to 253 characters in length.
Note The characters entered must conform to MD5 encryption standards.
Modification
This command was introduced.
The password argument was replaced with the secret-login
argument.
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
secret
59