Password: cisco1 Password: cisco You will see the following output:
NYACCESS1>enable
Password:
Password:
NYACCESS1#
Step 10
View the running configuration once more by entering the following command. Again, find the enable password configuration line:
NYACCESS1# show running-config
Press Enter.
You will see the following output:
NYACCESS1#show running-config
Building configuration...
Current configuration : 1373 bytes
!
! Last configuration change at 00:44:06 UTC Mon Mar 1 1993
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname NYACCESS1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$0YPF$m21ruuFYgz/mM3zW3PGl/0 enable password cisco1! <-- Output Omitted -->
Notice that the enable secret configuration command is encrypted, and the enable password is not. Clearly, it is better to have passwords in an encrypted form in your configuration files than in cleartext.
Note: The encrypted hash may be different than shown in the above output.
Step 11
It is possible to encrypt all clear text passwords that exist within the running configuration. To do this, you can use the service password-encryption in global configuration mode to encrypt clear text passwords. Configure this setting as follows.
Type the following commands (press Enter after each command):
NYACCESS1# configure terminal
Press Enter.
NYACCESS1(config)# service password-encryption
Press Enter.
NYACCESS1(config)# exit
Press Enter.
You will see the following output:
NYACCESS1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
NYACCESS1(config)#service password-encryption
NYACCESS1(config)#exit
NYACCESS1#