> The reason I asked was to see if other peoples impression was the same as
> mine. I've got the tools for the level 7 passwords, but was under the
> impression that the enable secret was almost impossible.

This is a dangerous assumption.  Nothing is impossible, and this has 
little to do with the method used to secure the password.  If your admins
choose a simple password, than the process to break it is simple.  If
they select a strong password, then the process is longer, but not ever
impossible.  

If the attacker can gain a copy of your config, via SNMP for example,
and actually see the encrypted output, you should not consider any 
password secure, no matter how complex it is.  Personally, I have 
a very nice RS/6000 B50 sitting in my lab rack at home, and would
have no problem commiting all its cycles to a task like password
cracking.




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=23780&t=23670
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to