Information Technology Reference
In-Depth Information
•
level level
—(Optional) Level for which the password applies. You can specify up to 16 privilege
levels, using numbers 0 through 15. Level 1 is normal exec-mode user privileges. If this argument
is not specified in the command, or if the
no
form of the command is used, the privilege level
defaults to 15 (traditional enable privileges).
•
password
—The password that users type to enter enable mode.
•
encryption-type
—(Optional) Cisco-proprietary algorithm used to encrypt the password. Currently,
the only encryption type available is 7. If you specify an encryption type, the next that argument you
supply must be an encrypted password (a password already encrypted by a Cisco router).
•
encrypted-password
—The encrypted password that you enter, copied from another router
configuration.
Example:
In the following example, the password pswd2 is enabled for privilege level 2:
enable password level 2 pswd2
If you lost the login password, configure the console line using the login and password line configuration
commands. Enter
CTRL Z
to exit configuration mode, and proceed to Step 15.
Syntax:
To enable password checking at login, use the
login
line configuration command:
login
[
local
|
tacacs
]
Syntax description:
•
local
—(Optional) Selects local password checking. Authentication is based on the username
specified with the
username
global configuration command.
•
tacacs
—(Optional) Selects the TACACS-style user ID and password-checking mechanism.
Examples:
The following example sets the password letmein on virtual terminal line 4:
line vty 4
password letmein
login
Syntax:
To specify a password on a line, use the
password
line configuration command:
password
password
Syntax description:
•
password
—Character string that specifies the line password. The first character cannot be a number.
The string can contain any alphanumeric characters, including spaces, up to 80 characters. You
cannot specify the password in the format number-space-anything. The space after the number
causes problems. For example,
hello 21
is a legal password, but
21 hello
is not. The password
checking is case-sensitive. For example, the password
Secret
is different from the password
secret
.
When an exec process is started on a line with password protection, the exec prompts for the
password. If the user enters the correct password, the exec prints its normal privileged prompt. The
user can try three times to enter a password before the exec exits and returns the terminal to the idle
state.
Example:
