Analysis of Cisco networking device password

Cisco networking device: password explanation

Password0 + password: Set the plaintext password. The password can be seen in both transmission and show.

Password7 + password: Set the ciphertext password, which must be followed by the ciphertext. How can this ciphertext be obtained? In fact, you do not have to consider that when your switch enables the encryption service, it is the ciphertext directly.

Cisco networking device: understanding of plaintext and ciphertext passwords

You do not need to manually add 0 to the plaintext password. The default value is to set the password.

View password configuration

The above can clearly show the enable password I set earlier. Next we will enable the encryption service, and write down the enable Password aaa I just set before enabling it)

After encryption is enabled, it is automatically changed to 1416130A after 7, which is the encryption of the ciphertext aaa)

Cisco networking device: we will not enable the encryption service

What should I do if I need ciphertext for telnet and enable plaintext? Of course, this is not the case in practice. If this is to help you understand), enable password can be used to enablepassword + password directly. What should I do if telnet does not support secret? Password7 + password: the password must be encrypted by the cisco device, just like the aaa ciphertext above is 1416130A). What should I do if I set the telnet password to aaa? password71416130A, in this case, enter the password aaa for telnet login.

Set the user name and password, and use the user name and password to log on via telnet. The configuration is as follows:

(Config) # usernameaa1_vilege15password0aaa1

After login via telnet, you only need to enter the user name and password to enter the privileged mode.

Cisco networking device: configuration instance

Enable password is set to aaa, telnet password is set to bbb, console password is set to ccc, and switch user name abc) and password abc ), when you set console and telnet logon, you only need to enter the user name and password to log on. That is, you can enter the user name abc and password abc to directly log on to the vswitch router and directly enter the privileged mode. And all encryption is required! Showrunning-config cannot see the password.

The configuration is as follows:

 
 

  
  
Router(config)#enablesecretaaa  
  
  
 
  
  
Router(config)#linecon0  
  
  
 
  
  
Router(config-line)#passwordccc  
  
  
 
  
  
Router(config-line)#exec-timeout010  
  
  
 
  
  
Router(config-line)#loginlocal  
  
  
 
  
  
Router(config-line)#exit  
  
  
 
  
  
Router(config)#linevty04  
  
  
 
  
  
Router(config-line)#passwordbbb  
  
  
 
  
  
Router(config-line)#exec-timeout010  
  
  
 
  
  
Router(config-line)#loginlocal  
  
  
 
  
  
Router(config-line)#exit  
  
  
 
  
  
Router(config)#servicepassword-encryption  
  
  
 
  
  
Router(config)#usernameabcprivilege15passwordabc 
 
 

Set!

The following figure shows the configuration in showrunning-config.

 
 

  
  
Router#showrun  
  
  
 
  
  
Buildingconfiguration...  
  
  
 
  
  
Currentconfiguration:1144bytes  
  
  
 
  
  
!  
  
  
 
  
  
!Lastconfigurationchangeat22:19:07CDTWedMay112011  
  
  
 
  
  
!  
  
  
 
  
  
version12.4  
  
  
 
  
  
servicetimestampsdebugdatetimemsec  
  
  
 
  
  
servicetimestampslogdatetimemsec  
  
  
 
  
  
servicepassword-encryption  
  
  
 
  
  
!  
  
  
 
  
  
hostnameRouter  
  
  
 
  
  
!  
  
  
 
  
  
boot-start-marker  
  
  
 
  
  
boot-end-marker  
  
  
 
  
  
!  
  
  
 
  
  
enablesecret5$1$bLK6$.2O8OpX8WEfH8BNvxjFZT.  
  
  
 
  
  
!  
  
  
 
  
  
noaaanew-model  
  
  
 
  
  
memory-sizeiomem5  
  
  
 
  
  
clocktimezoneBeijing8  
  
  
 
  
  
clocksummer-timeCDTrecurring  
  
  
 
  
  
ipcef  
  
  
 
  
  
!  
  
  
 
  
  
!  
  
  
 
  
  
!  
  
  
 
  
  
usernameabcprivilege15password70005110544  
  
  
 
  
  
！  
  
  
 
  
  
！  
  
  
 
  
  
！  
  
  
 
  
  
linecon0  
  
  
 
  
  
exec-timeout010  
  
  
 
  
  
password714141108  
  
  
 
  
  
loginlocal  
  
  
 
  
  
lineaux0  
  
  
 
  
  
linevty04  
  
  
 
  
  
exec-timeout010  
  
  
 
  
  
password706040D23  
  
  
 
  
  
loginlocal  
  
  
 
  
  
!  
  
  
 
  
  
!  
  
  
 
  
  
end 
 
 

After the Cisco networking device is configured in this way, the system prompts you to enter username after entering the password and press enter to enter the privileged mode. Some passwords can be changed to secret.