Configuring The Enable And Enable Secret Passwords - Cisco 1900 series Hardware Installation

Chapter 6 Configuring the Router

Configuring the Enable and Enable Secret Passwords

To provide an additional layer of security, particularly for passwords that cross the network or are stored
on a TFTP server, you can use either the enable password command or enable secret command. Both
commands accomplish the same thing—they allow you to establish an encrypted password that users
must enter to access privileged EXEC (enable) mode.
We recommend that you use the enable secret command because it uses an improved encryption
algorithm. Use the enable password command only if you boot an older image of the Cisco IOS
software or if you boot older boot ROMs that do not recognize the enable secret command.
For more information, see the "Configuring Passwords and Privileges" chapter in the Cisco IOS Security
Configuration Guide. Also see the
Security on Cisco Routers
Restrictions
If you configure the enable secret command, it takes precedence over the enable password command;
the two commands cannot be in effect simultaneously.
SUMMARY STEPS
1.
2.
3.
4.
5.
6.
7.
DETAILED STEPS
Command or Action
Step 1
enable
Example:
Router> enable
Step 2
configure terminal
Example:
Router# configure terminal
Step 3
enable password password
Example:
Router(config)# enable password pswd2
OL-19084-02
tech note.
enable
configure terminal
enable password password
enable secret password
end
enable
end
Performing the Initial Configuration on the Router
Cisco IOS Password Encryption Facts
Purpose
Enables privileged EXEC mode.
Enter your password if prompted.
•
Enters global configuration mode.
(Optional) Sets a local password to control access to various
privilege levels.
We recommend that you perform this step only if you
•
boot an older image of the Cisco IOS software or if you
boot older boot ROMs that do not recognize the enable
secret command.
Cisco 1900 Series Hardware Installation
tech note and the Improving
6-11