System information

ISR Overview and Providing Secure Administrative Access 89

To conﬁgure a password for a router’s console, the administrator enters line conﬁguration

mode for con 0 and speciﬁes a password with the password command. Then, to force

console connections to require a password, the login command is issued, as shown in

Example 3-2.

Similarly, you can set a password for the auxiliary port. Enter line conﬁguration mode for

aux 0 and specify a password and require a login, like the console port conﬁguration

illustrated in Example 3-3.

In addition to physically connecting to a router via the console or auxiliary port,

administrators can connect to a router using a Telnet or SSH connection. Instead of

connecting to physical ports, these types of connections use virtual ports. Speciﬁcally, by

default a router has ﬁve virtual tty lines (that is, “vty”), vty 0 to vty 4, over which

administrators can remotely connect. Similar to the console and auxiliary ports, passwords

can be assigned to these vty lines, as shown in Example 3-4.

Example 3-1 Setting the Enable Secret Password

R1(config)# ee

R1# ss

hostname R1

enable secret 5 $1$kmOB$rL419kUxmQphzVVTgO4sP1

Example 3-2 Setting the Console Password

R1(config)# ll

R1(config-line)# pp

R1(config-line)# ll

Example 3-3 Setting the Auxiliary Port Password

R1(config)# ll

R1(config-line)# pp

R1(config-line)# ll

Example 3-4 Setting the vty Line Password

R1(config)# ll

R1(config-line)# ll

R1(config-line)# pp