Cisco Systems trouble changing enable password

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
trouble changing enable password gselser 08-22-06
Posted by gselser on August 22, 2006, 10:44 am
Please log in for more thread options
I have a cisco 1601 router that I want to change the enable password
on. I know the current enable password. When I go into config t mode I
type in "enable password <the new password>". I exit with ctrl z and
write mem. When I logout and log back in I have to still use the old
password, the new one will not work. I am not sure what I am doing
wrong here. The only other thing is that I have the service
password-encryption turned on, could this be causing the problem and if
so what do I need to do to fix it. Any help or suggestions will be
appreciated.
Thanks
Glenn


Posted by James on August 22, 2006, 10:49 am
Please log in for more thread options

gselser wrote:
> I have a cisco 1601 router that I want to change the enable password
> on. I know the current enable password. When I go into config t mode I
> type in "enable password <the new password>". I exit with ctrl z and
> write mem. When I logout and log back in I have to still use the old
> password, the new one will not work. I am not sure what I am doing
> wrong here. The only other thing is that I have the service
> password-encryption turned on, could this be causing the problem and if
> so what do I need to do to fix it. Any help or suggestions will be
> appreciated.
> Thanks
> Glenn

Is there also an "enable secret" command in the config?

If so try:-

conf t
no enable password
enable secret <the new password>

James


Posted by Rainer Temme on August 22, 2006, 11:22 am
Please log in for more thread options
James wrote:
>> enable password <the new password>

> conf t
> no enable password
> enable secret <the new password>

I think the enable secret should be preferred because
its not easily decodable.

but forms have a number before the actual password (IIRC)

enable secret 0 <the_password_in_clear_text>

or

enable password 0 <the_password_in_clear_text>

Rainer

Posted by gselser on August 22, 2006, 11:24 am
Please log in for more thread options

James wrote:
> gselser wrote:
> > I have a cisco 1601 router that I want to change the enable password
> > on. I know the current enable password. When I go into config t mode I
> > type in "enable password <the new password>". I exit with ctrl z and
> > write mem. When I logout and log back in I have to still use the old
> > password, the new one will not work. I am not sure what I am doing
> > wrong here. The only other thing is that I have the service
> > password-encryption turned on, could this be causing the problem and if
> > so what do I need to do to fix it. Any help or suggestions will be
> > appreciated.
> > Thanks
> > Glenn
>
> Is there also an "enable secret" command in the config?
>
> If so try:-
>
> conf t
> no enable password
> enable secret <the new password>
>
> James
Yes I think there is a enable secret password. What is the difference
between the enable and secret password or are they the same?
Also is it okay to keep the service password-encryption on?
Glenn


Posted by AM on August 22, 2006, 11:35 am
Please log in for more thread options
gselser wrote:

> James wrote:

> Yes I think there is a enable secret password. What is the difference
> between the enable and secret password or are they the same?

"enable secret" stores the password in a way that can not be decrypted.
It wins over "enable password" as method that allows access to privilege mode.
So you were changing something that
wasn't used when authoriziting you to the privilege mode.

> Also is it okay to keep the service password-encryption on?

Yes of course, even if the encryption algorithm is very weak. Can be decrypted
in few milliseconds.

HTH

Alex.

Similar ThreadsPosted
trouble changing enable password August 22, 2006, 10:44 am
Configure Enable password August 25, 2006, 12:02 pm
PIX 520 with 5.1(4) OS enable password recovery problem October 7, 2006, 5:27 pm
Access to router without enable password ? (cisco 3620) October 28, 2007, 1:04 am
Password policy (password expiry after certain time) May 20, 2008, 4:46 pm
Changing IPs May 29, 2008, 6:41 pm
Changing IP address of PIX June 19, 2006, 10:26 am
Changing PIX-PIX VPN address October 18, 2006, 7:51 am
Time Changing January 25, 2007, 6:27 am
Time Changing January 25, 2007, 6:27 am
Time Changing January 25, 2007, 6:27 am
changing pix internal address October 10, 2005, 7:44 pm
Changing default gateway over. December 19, 2005, 10:57 am
Changing caller id information June 5, 2006, 4:11 pm
Cisco Pix 501 - changing mac address July 8, 2006, 8:39 am