■Use to encrypt passwords that are saved in the system’s configuration file. The
command converts plain text to cipher text. The default is no encryption.
â– Use of this command prevents casual observers from viewing passwords, for
example, in data obtained from show config displays. The command is not
intended to provide protection from serious analysis.
â– This command does not apply to passwords set with enable secret, enable
password, or password (Line Configuration mode).
â– This command does apply to authentication key passwords and BGP neighbor
passwords.
â– Example
host1(config)#service password-encryption
â– Use the no version to remove the encryption assignment.
â– See service password-encryption.
Setting and Erasing Passwords
You can set the following passwords:
â– Enable passwords that control access to different groups of commands.
â– A console password that controls access to the console.
â– Passwords for individual vty lines or groups of vty lines.
Privilege Levels
Different groups of commands are associated with privilege levels (Table 45 on
page 421). You can set enable passwords to allow users to access commands at
different privilege levels.
Table 45: Commands Available at Different Privilege Levels
Commands AvailablePrivilege Level
help, exit, enable, and disable commands0
User Exec commands plus commands at level 01
Privileged Exec show commands plus commands at levels 0 and 15
All commands except support commands10
Support commands that Juniper Networks Technical Support may provide and
all other commands
15
To maximize security and usability, set different passwords for levels 1, 5, 10, and
15. By default, no enable passwords exist.
Setting and Erasing Passwords â– 421
Chapter 7: Passwords and Security
To Next Page
Loading...
Need help?
General
