Cisco VPN 3000 Concentrator

[martinlechmann]

Hi,

I'm asking me, where the pw are stored and in which format they are readable in a established configuration of Cisco VPN 3000 Concentrator?

Are there ways to set a pw policy for logins to the box?

Martin

[steven.wilson]

on the web interface the files are available if you go through Administration/access rights/administrators.

this will allow you to set individual usernames and passwords and privileges.

Steve.

[martinlechmann]

thank you for your answer...

but I'm wondering where in the config.bak file or xml file I can find the pw? How is it encypted?

[gfullage]

The usernames and passwords are not stored in the CONFIG file anywhere. You can't see these in any file on the machine. And no, there's no way to set a specific password policy on the device.

Doing a password recovery (http://www.cisco.com/warp/public/474/pswdrec_vpn3000.html) on this device simply resets the admin user and password back to the default.

[martinlechmann]

ok... I agree... I know the recovery procedures for cisco devices, but this doesn't solve the problem

and one question remains... can I read the pw from a console in a special "debug" mode? Register values?