Password Encryption

Notice the bolded letter below, that is the passwords that we just set encrypted. But what about the other passwords, how do you get those encrypted. In the next steps I will show how to encrypt these passwords to give yourself an extra bit of security. While you are reading through the configuration also check out some of the projects that we just completed.

Router#sh running-config Building configuration...

Current configuration: ! ! Last configuration change at 01:36:06 UTC Wed Aug 17 2005 ! version 11.2 no service udp-small-servers no service tcp-small-servers ! hostname Router ! enable secret 5 $1$XRCY$T2UQ4sqR7rT0BSa2TV8r0/ enable password cisco1 ! ! interface Ethernet0 no ip address shutdown ! interface Serial0 no ip address shutdown ! –More– ######### #########interface Serial1 –More– ######### ######### no ip address shutdown ! no ip classless banner motd ^C Unauthrorized access prohibited!! You will be prosecuted!!^C ! line con 0 password cisco login line aux 0 password cisco login line vty 0 password cisco login line vty 1 4 login ! end

Notice the command service password-encryption, this command encrypts the passwords. Read down through the configuration, or do it on your router and notice the difference in the passwords. The difference is in bold for your convenience.

Router#config t Enter configuration commands, one per line. End with CNTL/Z. Router(config)#service password-encryption Router(config)#^Z Router#sh run %SYS-5-CONFIG_I: Configured from console by console Building configuration...

Current configuration: ! ! Last configuration change at 01:36:56 UTC Wed Aug 17 2005 ! version 11.2 service password-encryption no service udp-small-servers no service tcp-small-servers ! hostname Router ! enable secret 5 $1$XRCY$T2UQ4sqR7rT0BSa2TV8r0/ enable password 7 0822455D0A1654 ! ! interface Ethernet0 no ip address shutdown ! interface Serial0 no ip address shutdown –More– ######### #########! interface Serial1 no ip address shutdown ! no ip classless banner motd ^C Unauthrorized access prohibited!! You will be prosecuted!!^C ! line con 0 password 7 1511021F0725 login line aux 0 password 7 1511021F0725 login line vty 0 password 7 1511021F0725 login line vty 1 4 login ! end