Commands and Guidelines

Use the following commands and guidelines to set passwords or secrets for the privilege levels.

enable password

• Use to set a password, which controls access to Privileged Exec mode and some configuration modes.
• Enter the password in plain text (unencrypted) or cipher text (encrypted). In either case, the system stores the password as encrypted.
• The first time you define a password, you must enter it in plain text. To view its encrypted form, use the show config display. To redefine the password at a later date, you can enter the password in its encrypted form.
• You can use the following keywords:
  • 0 (zero)—Specifies an unencrypted password
  • 7—Specifies an encrypted password
• Example 1 (unencrypted password)

  host1(config)#enable password 0 mypassword

• Example 2 (encrypted password)

  host1(config)#enable password 7 x13_2

• Use the no version to remove the password.
• See enable password.

enable secret

• Use to set a secret, which controls access to the Privileged Exec mode and some configuration modes.
• Enter the secret in plain text (its unencrypted form) or cipher text (its encrypted form). In either case, the system stores the secret as encrypted.
• The first time you define a secret, you must enter it in plain text. To view its encrypted form, use the show config display. To redefine the secret at a later date, you can enter the secret in its encrypted form.
• You can use the following keywords:
  • 0 (zero)—Specifies an unencrypted secret
  • 5—Specifies an encrypted secret
• Example 1 (unencrypted secret)

  host1(config)#enable secret 0 yalta45

• Example 2 (encrypted secret)

  host1(config)#enable secret 5 y13_x

• Use the no version to remove the secret.
• See enable secret.

service password-encryption

• Use to encrypt passwords that are saved in the system’s configuration file. The command converts plain text to cipher text. The default is no encryption.
• Use of this command prevents casual observers from viewing passwords, for example, in data obtained from show config displays. The command is not intended to provide protection from serious analysis.
• This command does not apply to passwords set with enable secret, enable password, or password (Line Configuration mode).
• This command does apply to authentication key passwords and BGP neighbor passwords.
• Example

  host1(config)#service password-encryption

• Use the no version to remove the encryption assignment.
• See service password-encryption.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.