CHANGE USERNAME CISCO SWITCH HOW TO
CHANGE USERNAME CISCO SWITCH PASSWORD

LetвЂ™s try the PBKDF2 (SHA256) hashing algorithm: Switch(config)# enable algorithm-type sha256 secret cisco

CHANGE USERNAME CISCO SWITCH PASSWORD

Sha256 Encode the password using the PBKDF2 hashing algorithm Scrypt Encode the password using the SCRYPT hashing algorithm Md5 Encode the password using the MD5 algorithm HereвЂ™s how you can select the algorithm for the enable mode: Switch(config)# enable algorithm-type ? LetвЂ™s try one of the other algorithms that are considered secure nowadays. It will only take a few seconds to recover. For example, try this website for the MD5 hash that was created for my secret вЂњciscoвЂќ. ItвЂ™s very easy to brute force simple passwords. The вЂњ5вЂќ that you see behind вЂњenable secretвЂќ is the algorithm that we use, 5 means MD5. You now find an MD5 hash in the configuration. LetвЂ™s see what we find in the configuration: Switch# show running-config | include secret enable secret 5 $1$CANW$U9Y8O6KeFhrFR4l1Qo07h/ LetвЂ™s give this a try: Switch(config)# enable secret cisco Older IOS devices only support MD5 authentication. LINE The UNENCRYPTED (cleartext) 'enable' secretДЄbove you can see this switch supports MD5, PBKDF2 and SCRYPT hashes. LetвЂ™s try this for the enable mode: Switch(config)# enable secret ?Д Specifies an UNENCRYPTED password will followДҐ Specifies a MD5 HASHED secret will followДЁ Specifies a PBKDF2 HASHED secret will followД© Specifies a SCRYPT HASHED secret will follow If you want to try this, hereвЂ™s one of those websites.Д¬isco IOS supports something called a secret as an alternative to the password. There are websites that let you decrypt these encrypted strings on the fly. Now you might get a warm fuzzy feeling that everything is encrypted but in reality, this is a very poor (broken) encryption algorithm. Here you can see the result: Switch# show running-config | include password The service password-encryption command will encrypt every password that is plain text. HereвЂ™s how: Switch(config)# service password-encryption If you ever backup your configuration and forget to remove the passwords, same problem.Д¬isco IOS has a command that lets you encrypt all clear text passwords in your configuration. If someone steals one of your switches or routers, they will have your passwords. Take a look below: Switch# show running-config | include password In the examples above, we used passwords but there is one problemвЂ¦they all show up in clear text in our configuration.

LetвЂ™s get out of enable mode: Switch# disable Now we can set a password for enable mode: Switch(config)# enable password cisco You need to do this from the configuration mode: Switch# configure terminal What about enable mode / privileged mode? We can also add a password there. The switch asks for our username and password. Next time you open the console, hereвЂ™s what you see: Switch con0 is now available In the global config, we create a username вЂњadminвЂќ with password вЂњciscoвЂќ. Under the console settings, we use the login local command to tell the switch to refer to a local database of usernames and passwords for authentication. Switch(config)# username admin password cisco

CHANGE USERNAME CISCO SWITCH HOW TO

HereвЂ™s how to do this: Switch(config)# line console 0 This is a better option if you have multiple people that need to access your router or switch. Instead of a single password, itвЂ™s also possible to use usernames and passwords instead. At least we have some form of authentication but we can do betterвЂ¦ Username and Password Next time you open the console, this will happen: Switch con0 is now available We configure a password (cisco) and use the login command to tell Cisco IOS to prompt for this password.

HereвЂ™s where we have to add two commands: Switch(config-line)# password cisco HereвЂ™s how to do this: Switch(config)# line console 0ДЇirst, we need to enter the console settings. The most simple option to protect user mode is to add a password. This is something you might want to change, which is what IвЂ™ll explain in this lesson. The same thing applies to the enable mode: Switch> enable Once you press the enter button, we end up in user mode right away. If you connect a Cisco console cable to your switch or router, hereвЂ™s what happens: Switch con0 is now available By default, there is no authentication required. In this lesson, weвЂ™ll take a look at how you can secure user mode and privileged (enable) mode.

Change username cisco switch