300
Cisco 3900 Series, Cisco 2900 Series, and Cisco 1900 Series Integrated Services Routers Generation 2 Software Configuration Guide
Chapter Administering the Wireless Device
Protecting Access to Privileged EXEC Commands
To configure encryption for enable and enable secret passwords, follow these steps, beginning in
privileged EXEC mode.
SUMMARY STEPS
1.
configure terminal
2.
enable password
[
level
level
] {
password
|
encryption-type encrypted-password
}
or
enable secret
[
level
level
] {
password
|
encryption-type encrypted-password
}
3.
service password-encryption
4.
end
5.
copy running-config startup-config
DETAILED STEPS
Command
Purpose
Step 1
configure terminal
Enters global configuration mode.
Step 2
enable password
[
level
level
] {
password
|
encryption-type encrypted-password
}
or
enable secret
[
level
level
] {
password
|
encryption-type encrypted-password
}
Defines a new password or changes an existing password for
access to privileged EXEC mode.
or
Defines a secret password, which is saved using a
nonreversible encryption method.
•
(Optional) For
level
, the range is from 0 to 15. Level 1 is
normal user EXEC mode privileges. The default level is
15 (privileged EXEC mode privileges).
•
For
password
, specify a string from 1 to 25
alphanumeric characters. The string cannot start with a
number, is case sensitive, and allows spaces but ignores
leading spaces. By default, no password is defined.
•
(Optional) For
encryption-type
, only type 5, a Cisco
proprietary encryption algorithm, is available. If you
specify an encryption type, you must provide an
encrypted password—an encrypted password you copy
from another access point wireless device configuration.
Note
If you specify an encryption type and then enter a
clear text password, you cannot reenter privileged
EXEC mode. You cannot recover a lost encrypted
password by any method.
Step 3
service password-encryption
(Optional) Encrypts the password when the password is
defined or when the configuration is written.
Encryption prevents the password from being readable in the
configuration file.
Step 4
end
Returns to privileged EXEC mode.
Step 5
copy running-config startup-config
(Optional) Saves your entries in the configuration file.
