From: Jay Hennigan (jay@xxxxxxxx)
Date: Mon Dec 11 2000 - 19:42:26 GMT-3
On 11 Dec 2000, Shaun Nicholson wrote:
> OK guys I have a question which I cant solve on my own.
> It sounds simple so dont laugth.
>
> How do I put a password on a router without it getting encrypted.
>
> Now I know how to do it with the "username name password password" on the glo
bal command (you put no password service encrytion at the global command line).
> My real puzzle is how do you do it when using say ppp pap sent-username name
password.
> This always get encrypted and so it would appear to the router that the passw
ords do not match it sees one as encrypted and one not so rejects (I think that
s why its rejecting anyway) If I remove the no password service ecryption then
it works as both passwords are encryped.
I bet that the first character of your password is a number, probably 7.
> OK then so how can I leave the password under the BRI for ppp pap authenticat
ion as not encrypted?? or do I have to encrypt both.
Does your password start with a number? If so, it will cause problems,
especially if the number is 0, 5, or 7. IOS parses the string after
"password" when you enter the config. 0 = unencrypyted, 5 = MD5 Hhash (for
enable secret), 7 = XOR weak encryption (for normal passwords).
If your router has "no service password-encryption", its passwords should
look like: "password foo".
If it has sercice password-encryption, it will look like "password 7 0F33E5A4"
If you have a password of "7foo" things will probably not work as
expected. Starting a password with a number is a subtle gotcha.
-- Jay Hennigan - Network Administration - jay@west.net NetLojix Communications, Inc. NASDAQ: NETX - http://www.netlojix.com/ WestNet: Connecting you to the planet. 805 884-6323
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:26:01 GMT-3