CCNA - 230611 - 7주차 일요일[1]

no service timestamps log datetime msec

service timestamps debug datetime msec

no service password-encryption

---

>> service password-encrytion

 

진행 후 show run

username R1 password 7 0822455D0A16 // 평문으로 되어 있음. - 보안상 취약함.

---

>> Router(config)#username R2 secret cisco

 

show run으로 확인 후

username R2 secret 5 $1$mERr$hx5rVt7rPNoS4wqbXKX7m0

---

line con 0    ( 이거 풀고 싶다면 no password itworld -> login local)

 

Router#conf t


Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#line con 0

Router(config-line)#password itworld

Router(config-line)#login

Router(config-line)#do show run

..
!


line con 0

password itworld

login

enable 모드에서도 password 걸기: conf t -> enable secret enableit

 

---

실습

1. 모든장비 Local 계정 인증 생성
- username PC2 password 2222
- username PC3 secret 3333
- 패스워드 암호화 서비스 활성화
>> Router(config)#username PC2 password 2222
>> Router(config)#username PC3 secret 3333
>> Router(config)#service password-encrytion

2. Enable 암호 (password, secret) cisco
>> Router(config)#enable secret cisco

3. 적용 - line con 0 & line vty 0 4 = login local
>>
Router(config)#line con 0
Router(config-line)#login local
Router(config-line)#exit
Router(config)#line vty 0 4
Router(config-line)#login local
Router(config-line)#exit