It doesn't look like you can copy/paste:
Replacing a Type 4 Password with a Type 5 Password
Customers running a Cisco IOS or Cisco IOS XE release with support for Type 4 passwords and currently using Type 4 passwords on their device configuration may want to replace those Type 4 passwords with Type 5 passwords. Reasons include the following:
- Preparation for a device downgrade to a Cisco IOS or Cisco IOS XE release that does not support Type 4 passwords
- Compatibility with network management systems or other tools that cannot handle a device configuration that includes Type 4 passwords
- An organizational security policy that dictates the use of Type 5 passwords
- Concerns about the resiliency of Type 4 passwords versus Type 5 passwords against brute-force attacks
As mentioned previously, a Cisco IOS or Cisco IOS XE release with support for Type 4 passwords
does not allow the generation of a Type 5 password from a plaintext password on the device itself
. Customers who need to replace a Type 4 password with a Type 5 password must generate the Type 5 password outside the device and then copy the Type 5 password to the device configuration.
There are two options to generate a Type 5 password:
- Using another device running a Cisco IOS or Cisco IOS XE release without Type 4 support
- Using the openssl command-line tool (part of the OpenSSL Project)
In either case, administrators will need access to the plaintext version of the password to generate the Type 5 password.
Source: http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-sr-20130318-type4
HTH,
John
*** Please rate all useful posts ***
HTH,
John
*** Please rate all useful posts ***
