preview

Cisco Switch Configuration

Decent Essays

Define hostname It is very useful define the name of your Cisco switch/router. To do it: Enable administrative privilege Router>en Enter the configuration mode: Router#configure terminal Define the hostname (the name router is changed to Ciscozine) Router(config)#hostname Ciscozine Ciscozine(config)# Assign the privileged level secret The enable secret password allows you to enter enable mode (sometimes referred to as privileged mode or privileged-EXEC mode). To set a secret password: Enable administrative privilege Ciscozine>en Enter the configuration mode: Ciscozine#configure terminal Define the privileged-EXEC mode password; remember to use a strong password (combine letters, numbers, nd symbols). The enable secret …show more content…

To “encrypt” it: Enable administrative privilege Ciscozine>en Enter the configuration mode: Ciscozine#configure terminal The actual encryption process occurs when the current configuration is written or when a password is configured. Password encryption (it uses Vigenere algorithm) is applied to all passwords, including username passwords, authentication key passwords, the privileged command password, console and virtual terminal line access passwords, and Border Gateway Protocol neighbor passwords. This command is primarily useful for keeping unauthorized individuals from viewing your password in your configuration file. Ciscozine(config)#service password-encryption REMEMBER:The Vigenere algorithm is used to obfuscate the passwords (not really encrypt them as there is no encryption key) in order to prevent “shoulder surfing” from exposing passwords to someone who briefly looks at a running configuration. If, however, someone gets hold of the configuration they can easily retrieve the passwords using the reverse translation of the Vigenere algorithm. You could check your current configuration with the command “show running-config”. Ciscozine#show running-config Building configuration... Current configuration : 782 bytes ! version 12.2 service timestamps debug datetime msec service timestamps log datetime msec service

Get Access