Cisco 2501 - Router - EN Manual do Utilizador descarregar pdf (Página 25)

Router and Switch Administrative Configurations

203

GUIDE for your router or go to http://www.cisco.com/go/sdm

-----------------------------------------------------------------

The above login banner should look pretty familiar—it’s the banner that Cisco has in its

default configuration for its ISR routers. Again, this banner is displayed before the login

prompts but after the MOTD banner.

Setting Passwords

Five passwords are used to secure your Cisco routers: console, auxiliary, telnet (VTY), enable

password, and enable secret. The enable secret and enable password are used to set the pass-

word that’s used to secure privileged mode. This will prompt a user for a password when the

enable command is used. The other three are used to configure a password when user mode

is accessed through the console port, through the auxiliary port, or via Telnet.

Let’s take a look at each of these now.

Enable Passwords

You set the enable passwords from global configuration mode like this:

Todd(config)#enable ?

last-resort Define enable action if no TACACS servers

respond

password Assign the privileged level password

secret Assign the privileged level secret

use-tacacs Use TACACS to check enable passwords

The following points describe the enable password parameters:

last-resort Allows you to still enter the router if you set up authentication through a

TACACS (Terminal Access Controller Access System) server and it’s not available. But it isn’t

used if the TACACS server is working.

password Sets the enable password on older, pre-10.3 systems, and isn’t ever used if an

enable secret is set.

secret This is the newer, encrypted password that overrides the enable password if it’s set.

use-tacacs This tells the router to authenticate through a TACACS server. It’s convenient

if you have anywhere from a dozen to multitudes of routers because, well, would you like

to face the fun task of changing the password on all those routers? If you’re sane, no, you

wouldn’t. So instead, just go through the TACACS server and you only have to change the

password once—yeah!

47020.book Page 203 Wednesday, January 2, 2008 4:31 PM

1 2 ... 20 21 22 23 24 25 26 27 28 29 30 ... 75 76

Sem comentários

Cisco 2501 - Router - EN Manual do Utilizador Página 25