DETAILED STEPS
PurposeCommand or Action
Enables privileged EXEC mode. Enter your password if prompted.enable
Step 1
Example:
Switch> enable
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 2
Use one of the following:
Step 3
•
Defines a new password or changes an existing password for
access to privileged EXEC mode.
•
enable password [level level]
{password | encryption-type
encrypted-password}
•
Defines a secret password, which is saved using a nonreversible
encryption method.
◦
(Optional) For level, the range is from 0 to 15. Level 1 is
normal user EXEC mode privileges. The default level is 15
(privileged EXEC mode privileges).
•
enable secret [level level]
{password | encryption-type
encrypted-password}
◦
For password, specify a string from 1 to 25 alphanumeric
characters. The string cannot start with a number, is case
Example:
Switch(config)# enable password
example102
sensitive, and allows spaces but ignores leading spaces. By
default, no password is defined.
◦
(Optional) For encryption-type, only type 5, a Cisco
proprietary encryption algorithm, is available. If you specify
or
Switch(config)# enable secret level 1
password secret123sample
an encryption type, you must provide an encrypted
password—an encrypted password that you copy from
another switch configuration.
If you specify an encryption type and then enter a clear
text password, you can not re-enter privileged EXEC
mode. You cannot recover a lost encrypted password by
any method.
Note
(Optional) Encrypts the password when the password is defined or when
the configuration is written.
service password-encryption
Example:
Switch(config)# service
Step 4
Encryption prevents the password from being readable in the
configuration file.
password-encryption
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 25
Controlling Switch Access with Passwords and Privilege Levels
Protecting Enable and Enable Secret Passwords with Encryption