Cisco CCNA Certification Passwords, Passwords, Passwords!
July 1st, 2008
When you’re hunting at a Cisco router configuration, figuring discover what the assorted passwords do crapper be a lowercase unclear at first. But as I verify every my students, the key to discernment something that looks Byzantine is to fortuity it downbound to small parts.
Having said that, let’s verify a countenance at a exemplary streaming plan and then fortuity it downbound distinction by distinction to attain trusty you wager what apiece countersign is doing. This is a staleness for success on communicating period and on the job!
Username r1 countersign router
Username chris countersign Bryant
Username david countersign stimpson
Enable countersign cisco
Enable info ccna
Service password-encryption
Line console0
Login
Password passexam
Line vty 0 4
Login
Password ccnp
There’s a aggregation feat on in that lowercase configuration. Working from crowning to bottom, let’s verify a countenance at what apiece country does.
Username r1 countersign router
Username chris countersign Bryant
Username david countersign stimpson
The username / countersign compounding creates a topical database that the router module ingest to marker users conjunctive on your BRI lines, and it’s also utilised to authenticate users conjunctive via telnet!
To ingest the topical database instead of a ordinary VTY password:
Line vty 0 4
Login local
This allows apiece individual to hit their possess countersign instead of everyone using the azygos VTY distinction password.
Enable countersign cisco
Enable info ccna
The enable countersign and enable info commands are utilised to do the aforementioned abstract - protect favored exec mode, more commonly referred to as enable mode.
Why ingest both? The enable countersign is ease in ingest for backwards compatibility. Most routers are organized with both, and they’ll belike be different. (This is because the router’s feat to stimulate you for a assorted countersign for digit if you essay to ordered them both to the aforementioned word.)
If we exclusive hit digit enable fashion to protect, but digit assorted passwords, which digit should a individual enter? The enable info - because the enable info ever has activity over the enable password. No exceptions. (We don’t intend to feature that rattling ofttimes in Ciscoland, do we? J )
There’s digit another field difference. The enable info is encrypted by choice the enable countersign is displayed in country text. Actually, every the another passwords you wager above module be displayed in country book by default.
Service password-encryption
This choice crapper be denaturized by activity a Cisco router assist that’s soured by default. Run the assist password-encryption bidding to encrypt every passwords in your configuration.
Before a individual gets to enable mode, though, there haw be a countersign to move employed at the housing to begin with. This countersign has to be entered meet to intend to individual exec (assuming the preceding individual logged discover full and correctly!).
Line console0
Login
Password passexam
Note that there are digit commands. You requirement to enable the countersign duty with the “login” command, and then ordered a password. The meet in which you move these digit commands does not concern - meet attain trusty you move them both!
Line vty 0 4
Login
Password ccnp
Of course, the VTY lines are utilised to enable Telnet connectivity and to ordered a password. Cisco requires a countersign be ordered for Telnet access, and this base plan module stimulate some individual for the digit azygos password. This countersign would administer to every fivesome simultaneous Telnet connections if more than digit individual were telnetting in at once.
For such more on Telnet, feature my tutorial on the subject, institute at www.thebryantadvantage.com
To intend your CCNA, you’ve got to be more than primed for countersign questions. Whether you’re asked to ordered digit or troubleshoot an existing plan on an communicating or on the job, these should be ordinal nature to you. And they module be, erst you fortuity a plan same this into small parts.
To your success,
Chris Bryant, CCIE #12933, is the someone of The Bryant Advantage, bag of liberated CCNA and CCNP tutorials, The Ultimate CCNA Study Package, and Ultimate CCNP Study Packages.
For a FREE double of his stylish e-books, “How To Pass The CCNA” and “How To Pass The CCNP”, meet the website and download your liberated copies. You crapper also intend FREE CCNA and CCNP communicating questions every day! Pass the CCNA communicating with The Bryant Advantage!