Unencrypted local passwords in config?

[dan.tesch]

I hope this is the correct section to ask this question, I am setting up a new 2811 router (moving from a 2611). We have local usernames on the 2611 for authenticating ssh connections and some PPTP sessions. The passwords associated with the usernames are encrypted when viewing them with a sh run or in a config copied to tftp but on the new router the psswds. show as plain text. Is this because I do not yet have the aaa set up as it is on the old router? is there a better way to do this on the new router (locally, not authenticating to a second box)?

[Premdeep Banga · Accepted solution]

Hi,

Give the command,

service password-encryption

on configure terminal.

This should encrypt the password of the account, so that its not visible.

Regards,

Prem

[dan.tesch]

Thanks, I will try that. How come this command does not appear in the config from my old router (2611 on 12.3 10)?

Is this a command that is issued and doesn't appear in the config after?

[dan.tesch]

Thanks, I now see that line in the top of my old config.

[rochopra]

use following command on router

service password-encryption

following link can give you more detail on the same:

http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_command_reference_chapter09186a00801a7fa1.html#wp1204790