liveBook · Manning

Service password-encryption command

As explained in Acing the CCNA Exam: Volume 1 Fundamentals and Protocols

The service password-encryption command is a Cisco IOS configuration command that applies reversible type 7 obfuscation to supported cleartext passwords.

The service password-encryption command is entered in global configuration mode to obfuscate current and future supported passwords in the configuration. It replaces cleartext with type 7 ciphertext, but type 7 is weak and easily reversed, so enable secret is preferred. section 5.4.1

Encrypting an enable password

R1(config)# service password-encryption R1(config)# do show running-config | include enable enable password 7 0307580507 The number 7 identifies the encryption type. Using no service password-encryption stops encryption for future passwords but does not decrypt existing entries. section 5.4.1

Remember these configuration and exam points:

  • Use enable secret instead when stronger protection is required; enable password is a legacy feature. section 5.5
  • Use show running-config | include enable to filter configuration output and verify the stored form. section 5.4.1

How Acing the CCNA Exam: Volume 1 Fundamentals and Protocols covers it

How deep it goes
Explains configuration mode, current and future password coverage, type 7 notation, reversal risk, and the no-command limitation.
Examples
Uses enable password configuration, filtered running-config output, and type 7 ciphertext beginning with 7.
What it assumes
Assumes familiarity with global configuration mode, enable password, and show running-config; introduces type 7 storage behavior.
What you can do after
Operate/configure Cisco IOS passwords with type 7 obfuscation and recognize when enable secret is the safer choice.
How it connects
Connects enable password with running-config, enable secret, privileged EXEC mode, and type 7 encryption.
Cover of Acing the CCNA Exam: Volume 1 Fundamentals and Protocols
liveBookmanning.com
Read Acing the CCNA Exam: Volume 1 Fundamentals and Protocols on liveBook Get the book at manning.com

Also explained in

Compare how 2 books explain service password-encryption command →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 1 Fundamentals and Protocols. The section links point to the parts of the book it draws on.