Ads 468x60px

How to encrypt my pass phrase in my config file

Monday, February 10, 2014 11:05 PM
Log into the switch.
Enter config mode
Config t <enter>
service password-encryption secret 2 substituteyourpassphrasehere <enter> to remove encryption type no service password-encryption <enter> ctrl z wr <enter>
You will need to run that command on all switches for the encrypted configs to work properly.
You can use the encrypted password for the local admin users but the encrypted dot11i phrases will not work the way we expect it for a master config file.
To get the config with the encrypted dot11i phrases working you will need to enter the initial shared secret into the switch. However, having access to the shared secret in plain text defeats the purpose of an encrypted phrase in the first place. The answer I got from engineering was that this was a "deployment" isssue.
See below example config.
!
! configuration of RFS6000 version 3.2.0.0-040R
!
version 1.1
!
service password-encrhttp://motopedia.mot.com/wiki?title=How-to_-_encrypt_my_pass_phrase_in_my_config_file&action=edityption secret 2 test-secret
!
!
 wireless
  wlan 1 enable
  wlan 1 description PHONENET
  wlan 1 ssid test
  wlan 1 vlan 4000
  wlan 1 encryption-type tkip
  wlan 1 secure-beacon                                           
  no wlan 1 answer-bcast-ess
  wlan 1 qos classification wmm
  wlan 1 dot11i phrase 2 zTuoE6ReJTJvyNp5kNVlOhRY4yxaAC8qRhFaQPl6/1Q+fQYyMycawp+SPHjIIpR9XGsLsaQTXEzK25zHKrl3wKQgr62HJaGsMgR7eNDfdjGA
!
!
end
Nhãn: ,

0 nhận xét:

Post a Comment

Subscribe to: Post Comments (Atom)