I think the answer to your question is no. The only password that you can
set on the 1900 is the enable password/secret ...
Pierre-Alex
-----Original Message-----
From: Leigh Anne Chisholm [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 13, 2001 2:09 PM
To: Pierre-Alex; Dale Cunningham
Cc: [EMAIL PROTECTED]
Subject: RE: MORE TECHNICAL DETAILS ON PROBLEM SOLVED: VTY LINES NON
EXISTENT!!!! :
Pierre,
I see that Jorge Moreira managed to answer your question about vty passwords
on the Cisco Catalyst 1900 series switch. What threw me (and Rik as well)
was your inclusion of "XL" after 1912--the Cisco Catalyst 1912 (and 1924)
switches are not part of the XL series. I needed a few minutes to make sure
that Cisco hadn't come out with a new XL series switch for which I was
unaware before I re-responded to your query.
As you've discovered, Jorge is correct--it's the "enable" password on the
Catalyst 1900 series switch that is used to enable telnet access. But since
we're discussing password usage on the 1900 series... here's a bit of a
brainteaser for you, the answer for which I had included in last month's
CCNA LAN Switching paper on CertificationZone:
You'll notice that when you access your Catalyst switch via the console
port, that without issuing any sort of password, you're immediately able to
access several commands on the switch -- you've immediately got access to
"user mode". In some organizations, this can present a security risk. Can
you set a "user-mode" password for the Catalyst 1900 series switch? If so,
how?
-- Leigh Anne
-----Original Message-----
From: Pierre-Alex [mailto:[EMAIL PROTECTED]]
Sent: February 13, 2001 12:39 PM
To: Dale Cunningham; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: MORE TECHNICAL DETAILS ON PROBLEM SOLVED: VTY LINES NON
EXISTENT!!!! :
Hi all,
Technically speaking, there is no such thing as a console password on
version 9.00.04. of the catalyst 1912XL-EN. Although it is called a console
password, it is really an enable password. Following are the steps that
demonstrate this:
1) Erase nvram to start "fresh"
2) Type P to set the console password to cisco
3) Press K to enter the command line mode. You will be in enable mode
WITHOUT any prompt for a password.
4) Now try to enter enable mode. You are required to enter a password.
(cisco)
5) Go to config mode, set the enable password to demo, then exit
6) The next time you try to access the exec mode, the password that will let
you in will be demo, NOT cisco. This proves that the console password is
really an enable password.
Trying to understand why the user mode is unprotected (no console
password -strictly speaking) I typed ? at the user mode. This is what I
got:
>?
Exec commands:
enable Turn on privileged commands
exit Exit from the EXEC
help Description of the interactive help system
ping Send echo messages
session Tunnel to module
show Show running system information
terminal Set terminal line parameters
At first sight it looks like there is nothing major that you could do with
those commands, but if you explore the show options you will see at least 2
powerful commands: show ip and show cdp neighbors that could be used to
document or hack into the network.
CONCLUSION:
The 1912 does not have a console password and since there is no good reason
for this state of affair appropriate (physical) security measures should be
taken to prevent unauthorized console access.
Kind Regards to all,
Pierre-Alex
.
Pierre-Alex
-----Original Message-----
From: Pierre-Alex [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 13, 2001 11:30 AM
To: Dale Cunningham; [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: RE: PROBLEM RESOLVED: VTY LINES NON EXISTENT!!!! :
So, I found out the hard way that VERSION IOS version 9.XXXX of the
1912XL-EN switch does NOT have VTY LINES. It ONLY has a Console Line. As
soon as I put the password on the Console line, I was able to telnet
remotely to the switch.
Thanks all for all helping,
Pierre-Alex
-----Original Message-----
From: Jim Dixon [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 13, 2001 11:27 AM
To: 'Pierre-Alex'; Dale Cunningham
Cc: [EMAIL PROTECTED]
Subject: RE: VTY LINES NON EXISTENT!!!!
Console into the 1912 and set your password from the console on the menu.
There is an option there under one of the menu items to set password.
-----Original Message-----
From: Pierre-Alex [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, February 13, 2001 10:30 AM
To: Dale Cunningham
Cc: [EMAIL PROTECTED]
Subject: VTY LINES NON EXISTENT!!!!
Hi All,
I can't telnet into my 1912XL-EN Switch. I am using the latest IOS (9.00...)
I get the error message, "password required but none set".
There is no option on this switch that I could find for setting VTY lines
options. Am I doing something wrong?
Pierre-Alex
_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
