From: Shaun Nicholson (Shaun.Nicholson@xxxxxx)
Date: Mon Dec 11 2000 - 20:46:10 GMT-3
No my password is cisco
Shaun
jay@west.net on 12/11/2000 05:44:00 PM
To: Shaun Nicholson
cc: ccielab@groupstudy.com@Internet
Subject: Re: Password encryption
On 11 Dec 2000, Shaun Nicholson wrote:
> OK guys I have a question which I cant solve on my own.
> It sounds simple so dont laugth.
>
> How do I put a password on a router without it getting encrypted.
>
> Now I know how to do it with the "username name password password" on the
global command (you put no password service encrytion at the global command
line).
> My real puzzle is how do you do it when using say ppp pap sent-username name
password.
> This always get encrypted and so it would appear to the router that the
passwords do not match it sees one as encrypted and one not so rejects (I
think thats why its rejecting anyway) If I remove the no password service
ecryption then it works as both passwords are encryped.
I bet that the first character of your password is a number, probably 7.
> OK then so how can I leave the password under the BRI for ppp pap
authentication as not encrypted?? or do I have to encrypt both.
Does your password start with a number? If so, it will cause problems,
especially if the number is 0, 5, or 7. IOS parses the string after
"password" when you enter the config. 0 = unencrypyted, 5 = MD5 Hhash (for
enable secret), 7 = XOR weak encryption (for normal passwords).
If your router has "no service password-encryption", its passwords should
look like: "password foo".
If it has sercice password-encryption, it will look like "password 7 0F33E5A4"
If you have a password of "7foo" things will probably not work as
expected. Starting a password with a number is a subtle gotcha.
-- Jay Hennigan - Network Administration - jay@west.net NetLojix Communications, Inc. NASDAQ: NETX - http://www.netlojix.com/ WestNet: Connecting you to the planet. 805 884-6323
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:26:01 GMT-3