Cisco 3200 Series, Руководство по настройке программного обеспечения

Страница: 71 / 314

Administering the WMIC
Protecting Access to Privileged EXEC Commands
7
Cisco 3200 Series Wireless MIC Software Configuration Guide
To set or change a static enable password , follow these steps, beginning in privileged EXEC mode:
This example shows how to change the enable password to l1u2c3k4y5 . The password is not encrypted
and provides access to level 15 (traditional privileged EXEC mode access).
bridge(config)# enable password l1u2c3k4y5
Protecting Enable and Enable Secret Passwords with Encryption
To provide an additional layer of security, particularly for passwords that cross the network or that are
stored on a Trivial File Transfer Protocol (TFTP) server, you can use either the
enable password or the
enable secret command. Both commands accomplish the same thing; that is, you can establish an
encrypted password that users must enter to access privileged EXEC mode (the default) or any privilege
level you specify.
We recommend that you use the enable secret command because it uses an improved encryption
algorithm.
If you configure the enable secret command, it takes precedence over the enable password command;
the two commands cannot be in effect simultaneously.
Command Purpose
Step 1 configure terminal Enters global configuration mode.
Step 2 enable password password Defines a new password or change an existing password for access to
privileged EXEC mode.
The default password is Cisco .
For password , specify a string from 1 to 25 alphanumeric characters. The
string cannot start with a number, it is case sensitive, and it allows spaces
but ignores leading spaces. It can contain the question mark (?) character
if you precede the question mark with the key combination Crtl-V when
you create the password; for example, to create the password abc?123, do
this:
1. Enter abc .
2.
Enter Crtl-V .
3. Enter ?123 .
When the system prompts you to enter the enable password, you need not
precede the question mark with the Ctrl-V; you can simply enter abc?123
at the password prompt.
Step 3 end Returns to privileged EXEC mode.
Step 4
show running-config Verifies your entries.
Step 5 copy running-config startup-config (Optional) Saves your entries in the configuration file.
The enable password is not encrypted and can be read in the WMIC
configuration file.