EM316LNXNM-OT
Configuration Context
PN 1275005-100 Rev E6
54
6.7.3. Protecting Passwords
The most recent commands entered in a CLI session may be viewed by using "
show history
". If
passwords are typed as part of a command line, then these passwords are visible in the command history
log. Log out of CLI sessions after password changes are made to clear the command history.
fiberdriver(config)# username foouser password foouser1 class super
fiberdriver(config)# show history
configure terminal
username foouser password foouser1 class super
fiberdriver(config)# logout
Another way to hide displayed passwords is by using commands that prompt for separate password input.
When the passwords are entered interactively as in the example beloow, the system does not display or
save them in the command history.
fiberdriver(config)# username foouser password
Password: — Password not echoed to screen
Again: — Password not echoed to screen
fiberdriver(config)# username foouser class super
fiberdriver(config)# show history
configure terminal
username foouser password
username foouser class super
fiberdriver(config)#
Some CLI commands (like the ones listed below) inlcude passwords in their syntax. Most of these
commands have alternative syntax that prompt for passwords interactively and hide them from the display
and history.
•
fiberdriver(config)#
snmp-server community read
•
fiberdriver(config)#
snmp-server community write
•
fiberdriver(config)#
snmp-server user foouser
•
fiberdriver(config)#
username foouser
•
fiberdriver(config)#
username foouser password
