Please enable JavaScript.

Coggle requires JavaScript to display documents.

Secure Device Access - Coggle Diagram

- - - - Sw-Floor-1# configure terminal
        
        Sw-Floor-1(config)# service password-encryption
        
        Sw-Floor-1(config)#
      - Use the show running-config command to verify that passwords are now encrypted.
        
        .
        
        Sw-Floor-1(config)# end
        
        Sw-Floor-1# show running-config
        
        !
        
        (Output omitted)
        
        !
        
        line con 0
        
        password 7 094F471A1A0A
        
        login
        
        !
        
        line vty 0 4
        
        password 7 094F471A1A0A
        
        login
        
        line vty 5 15
        
        password 7 094F471A1A0A
        
        login
        
        !
        
        !
        
        end
  - - - R1(config)# service password-encryption
      - R1(config)# security passwords min-length 8
      - R1(config)# login block-for 120 attempts 3 within 60
      - R1(config)# line vty 0 4
      - R1(config-line)# password cisco123
      - R1(config-line)# exec-timeout 5 30
      - R1(config-line)# transport input ssh
      - R1(config-line)# end
      - R1#
      - R1# show running-config | section line vty
      - line vty 0 4
        
        password 7 094F471A1A0A
        
        exec-timeout 5 30
        
        login
        
        transport input ssh
      - R1#
  - - - Sw-Floor-1# configure terminal
      - Sw-Floor-1(config)# line console 0
      - Sw-Floor-1(config-line)# password cisco
      - Sw-Floor-1(config-line)# login
      - Sw-Floor-1(config-line)# end
      - Sw-Floor-1#
    - - To secure privileged EXEC access, use the enable secret password global config command
        
        .
        
        Sw-Floor-1# configure terminal
        
        Sw-Floor-1(config)# enable secret class
        
        Sw-Floor-1(config)# exit
        
        Sw-Floor-1#
  - - - R1(config)# enable secret cisco12345
      - R1(config)# do show run | include enable
      - enable secret 5 $1$cam7$99EfzkvmJ5h1gEbryLVRy.
      - R1(config)# enable secret ?
        
        0 Specifies an UNENCRYPTED password will follow
        
        5 Specifies a MD5 HASHED secret will follow
        
        8 Specifies a PBKDF2 HASHED secret will follow
        
        9 Specifies a SCRYPT HASHED secret will follow
        
        LINE The UNENCRYPTED (cleartext) 'enable' secret
        
        level Set exec level password
      - R1(config)# line con 0
      - R1(config-line)# password ?
        
        0 Specifies an UNENCRYPTED password will follow
        
        7 Specifies a HIDDEN password will follow
        
        LINE The UNENCRYPTED (cleartext) line password
      - R1(config-line)#
- - - - Router(config)# login block-for seconds attempts tries within seconds
      - Router(config)# login quiet-mode access-class {acl-name | acl-number}
      - Router(config)# login delay seconds
      - Router(config)# login on-success log [every login]
      - Router(config)# login on-failure log [every login]
    - - R1(config)# login block-for 15 attempts 5 within 60
      - R1(config)# ip access-list standard PERMIT-ADMIN
      - R1(config-std-nacl)# remark Permit only Administrative hosts
      - R1(config-std-nacl)# permit 192.168.10.10
      - R1(config-std-nacl)# permit 192.168.11.10
      - R1(config-std-nacl)# exit
      - R1(config)# login quiet-mode access-class PERMIT-ADMIN
      - R1(config)# login delay 10
      - R1(config)# login on-success log
      - R1(config)# login on-failure log
      - R1(config)#
  - - - R1(config)# ip access-list standard PERMIT-ADMIN
      - R1(config-std-nacl)# remark Permit only Administrative hosts
      - R1(config-std-nacl)# permit 192.168.10.10
      - R1(config-std-nacl)# permit 192.168.11.10
      - R1(config-std-nacl)# exit
      - R1(config)# login quiet-mode access-class PERMIT-ADMIN