Cisco Catalyst 2960-XR Security Configuration Manual page 48

Protecting Enable and Enable Secret Passwords with Encryption
SUMMARY STEPS
1. configure terminal
2. Use one of the following:
3. service password-encryption
4. end
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2 Use one of the following:
• enable password [level level]
{password | encryption-type
encrypted-password}
• enable secret [level level]
{password | encryption-type
encrypted-password}
Example:
Switch(config)# enable password
example102
or
Switch(config)# enable secret level 1
password secret123sample
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
26
• enable password [level level]
{password | encryption-type encrypted-password}
• enable secret [level level]
{password | encryption-type encrypted-password}
Purpose
Enters the global configuration mode.
Controlling Switch Access with Passwords and Privilege Levels
• Defines a new password or changes an existing password for access
to privileged EXEC mode.
• Defines a secret password, which is saved using a nonreversible
encryption method.
◦ (Optional) For level, the range is from 0 to 15. Level 1 is normal
user EXEC mode privileges. The default level is 15 (privileged
EXEC mode privileges).
◦ For password, specify a string from 1 to 25 alphanumeric
characters. The string cannot start with a number, is case
sensitive, and allows spaces but ignores leading spaces. By
default, no password is defined.
◦ (Optional) For encryption-type, only type 5, a Cisco proprietary
encryption algorithm, is available. If you specify an encryption
type, you must provide an encrypted password—an encrypted
password that you copy from another switch configuration.
If you specify an encryption type and then enter a clear text
Note
password, you can not re-enter privileged EXEC mode. You
cannot recover a lost encrypted password by any method.
OL-29434-01