Cisco Catalyst 2960 Series, Configuration Manual

Page: 843 / 2288

Purpose Command or Action
Enters the global configuration mode. configure terminal
Example:
Switch#
configure terminal
Step 2
Use one of the following: Step 3 • Defines a new password or changes an existing password for
access to privileged EXEC mode.
• enable password [ level level ]
{ password | encryption-type
encrypted-password }
• Defines a secret password, which is saved using a nonreversible
encryption method.
◦ (Optional) For level , the range is from 0 to 15. Level 1 is
normal user EXEC mode privileges. The default level is 15
(privileged EXEC mode privileges).
• enable secret [ level level ]
{ password | encryption-type
encrypted-password }
◦ For password , specify a string from 1 to 25 alphanumeric
characters. The string cannot start with a number, is case
Example:
Switch(config)# enable password
example102
sensitive, and allows spaces but ignores leading spaces. By
default, no password is defined.
◦ (Optional) For encryption-type , only type 5, a Cisco
proprietary encryption algorithm, is available. If you specify
or
Switch(config)# enable secret level 1
password secret123sample
an encryption type, you must provide an encrypted
password
— an encrypted password that you copy from
another switch configuration.
If you specify an encryption type and then enter a clear
text password, you can not re-enter privileged EXEC
mode. You cannot recover a lost encrypted password by
any method.
Note
(Optional) Encrypts the password when the password is defined or when
the configuration is written. service password-encryption
Example:
Switch(config)#
service
Step 4
Encryption prevents the password from being readable in the
configuration file.
password-encryption
Returns to privileged EXEC mode. end
Example:
Switch(config)# end
Step 5
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
761
How to Control Switch Access with Passwords and Privilege Levels