topic Re: Username with priviledge level 15 in Switches, Hubs, and Modems

Username with priviledge level 15

mascarenhas2010 — Thu, 18 Nov 2010 13:28:13 GMT

Hello,

I wan to create a username with privilege level 15 what is the command as i m from cisco i don"t know much about HP,

Re: Username with priviledge level 15

Pieter 't Hart — Fri, 19 Nov 2010 08:34:26 GMT

The 5400 AccessSecurityGuide says:

Local Manager and Operator Passwords
The information saved to the running-config file when the include-credentials
command is entered includes:
password manager [user-name ]

password operator [user-name ]

where
is an alphanumeric string for the user name assigned to the
manager or operator.

indicates the type of hash algorithm used: SHA-1 or plain text.

is the SHA-1 authentication protocolâ s hash of the password or clear ASCII text.

Manager and operator designate the priviledge level.

Re: Username with priviledge level 15

mascarenhas2010 — Sat, 20 Nov 2010 05:13:43 GMT

Hello Friends,

When i specify SHA type authentication it doesn't accepts the password, when i specify plain text password it works fine.

What type of password i should use in SHA type.

Re: Username with priviledge level 15

Jeff Carrell — Sat, 20 Nov 2010 15:09:08 GMT

mascarenhas2010 asked: "What type of password i should use in SHA type"

You must enter an already SHA-1 encrypted password if you select SHA1 for the password hash-type field.

hth...Jeff

Re: Username with priviledge level 15

mascarenhas2010 — Sat, 20 Nov 2010 20:21:11 GMT

Hello,

What do u mean by already SHA-1 encrypted password if you select SHA1 for the password hash-type field.

I m creating a new user than how i can have a SHA-1 password.

Re: Username with priviledge level 15

Jeff Carrell — Sun, 21 Nov 2010 15:11:09 GMT

mascarenhas2010 asked: "What do u mean by already SHA-1 encrypted password if you select SHA1 for the password hash-type field.

I m creating a new user than how i can have a SHA-1 password."

You must run a SHA-1 application to encrypt your cleartext password into a SHA-1 hash, then enter that into the cli on the switch.

I did a search and found this online appl (one of many:
http://www.ratajik.com/CreateNetPassword/

however, using an online application allows the possibility of others to capture your real secret password you convert to SHA-1 and store in their SHA-1 decryption database, so you may want to find a standalone appl you can run, not online.

hth...Jeff

Re: Username with priviledge level 15

Pieter 't Hart — Mon, 22 Nov 2010 07:59:46 GMT

On the first switch you configure, you specify the password as cleartext.
The encrypted password is displayd when using "show config".
You can reuse lines from the first config including the configline with this encrypted password when you configure subsequent switches.
(or reconfigure this switch)

From the CLI manual.
sha-1 >
Specifies the type of algorithm (if any) used to hash the password. Valid
values are plaintext or sha-1.
Note: You can enter a manager, operator, or 802.1X port-access password in
clear ASCII text or hashed format. However, manager and operator passwords
are displayed and saved in a configuration file only in hashed format;
port-access passwords are displayed and saved only as plain ASCII text.