Passwords And Security; Encrypting Passwords In Configuration File; Commands And Guidelines - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - SYSTEM BASICS CONFIGURATION GUIDE 2010-10-04 Configuration Manual

Encrypting Passwords in Configuration File

Commands and Guidelines

enable password
Copyright © 2010, Juniper Networks, Inc.
Enable and configure the secret. The 0 keyword specifies that you are entering an
1.
unencrypted secret.
host1(config)#enable secret level 15 0 rocket
Display the secret.
2.
host1(config)#exit
host1#show secret
Current Password Settings
-------------------------
encryption
level type
----- ----------
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15 5 (secret)
You or users with high privilege levels can now use the encrypted password,
bcA";+1aeJD8)/[1ZDP6, with the password command.
You can also direct the system software to encrypt passwords saved in the configuration
file by using the service password-encryption command. This command is useful to
keep unauthorized individuals from viewing your password in your configuration file. It is
important to remember that this command uses a simple cipher and is not intended to
protect against serious analysis. You can tell if a string is encrypted if it is preceded by
an 8.
Use the following commands and guidelines to set passwords or secrets for the privilege
levels.
Use to set a password, which controls access to Privileged Exec mode and some
configuration modes.
Enter the password in plain text (unencrypted) or cipher text (encrypted). In either
case, the system stores the password as encrypted.
encrypted
password/secret
-------------------- ----------
bcA";+1aeJD8)/[1ZDP6 configured
Chapter 7: Passwords and Security
mode
405