Re: MD5 encrypting vty passords [7:33533]

2002-01-29 Thread Henry D.

That specifies type 7 encryption, you can enable it before or after
you configured your vty's. "enable secret " is used to enter
password which will be encrypted with MD5. If using MD5 don't use it in
conjunction with "enable password " command as that would create
another enable password and would make your MD5 password as prone
to discoveries as type 7.

""bergenpeak""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Is the MD5 encryption used when one enables the "service
> password-encryption"
> before entering the vty password?
>
> What encryption mechanism is used when a password is entered as type 7?
>
> Thanks
>
>
> "Henry D." wrote:
> >
> > It's not possible to use MD5 on vty's.
> > I suppose the reason would be that MD5 enable
> > password is not all that much more secure than type
> > 7 passwords. When you type them they both are being
> > sent over the network in clear text anyway. The only reason
> > for using MD5 would be so anyone who sees your config
> > wouldn't be able to crack the MD5 password as easily as type 7.
> > But on the other hand, if you have access to the config, you're either
> > already in enabled mode or you store it in insecure place. If insecure
> place
> > then there may be other ways to break into or your equipment anyways.
> > You see, there is no perfect simple solution, you got to rely on many
steps
> > to protect what needs to be protected.
> >
> > ""Charlie Wehner""  wrote in message
> > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > > Is there any way to MD5 encrypt vty passords?
> > >
> > > If so, how?
> > >
> > > If not, why not?
> > >
> > > Thanks,
> > > Charlie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33564&t=33533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MD5 encrypting vty passords [7:33533]

2002-01-29 Thread bergenpeak

Is the MD5 encryption used when one enables the "service
password-encryption"
before entering the vty password?

What encryption mechanism is used when a password is entered as type 7?

Thanks


"Henry D." wrote:
> 
> It's not possible to use MD5 on vty's.
> I suppose the reason would be that MD5 enable
> password is not all that much more secure than type
> 7 passwords. When you type them they both are being
> sent over the network in clear text anyway. The only reason
> for using MD5 would be so anyone who sees your config
> wouldn't be able to crack the MD5 password as easily as type 7.
> But on the other hand, if you have access to the config, you're either
> already in enabled mode or you store it in insecure place. If insecure
place
> then there may be other ways to break into or your equipment anyways.
> You see, there is no perfect simple solution, you got to rely on many steps
> to protect what needs to be protected.
> 
> ""Charlie Wehner""  wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Is there any way to MD5 encrypt vty passords?
> >
> > If so, how?
> >
> > If not, why not?
> >
> > Thanks,
> > Charlie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33561&t=33533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: MD5 encrypting vty passords [7:33533]

2002-01-28 Thread Henry D.

It's not possible to use MD5 on vty's.
I suppose the reason would be that MD5 enable
password is not all that much more secure than type
7 passwords. When you type them they both are being
sent over the network in clear text anyway. The only reason
for using MD5 would be so anyone who sees your config
wouldn't be able to crack the MD5 password as easily as type 7.
But on the other hand, if you have access to the config, you're either
already in enabled mode or you store it in insecure place. If insecure place
then there may be other ways to break into or your equipment anyways.
You see, there is no perfect simple solution, you got to rely on many steps
to protect what needs to be protected.

""Charlie Wehner""  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Is there any way to MD5 encrypt vty passords?
>
> If so, how?
>
> If not, why not?
>
> Thanks,
> Charlie




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=33539&t=33533
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]