liveBook · Manning

Type 9

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

A type 9 password is a Cisco IOS password stored using an scrypt-derived hash representation.

A type 9 password is a Cisco IOS password stored as an scrypt-derived hash representation. The algorithm identifier appears before the hash in the saved configuration. section 11.3.1

Configure an enable secret

Use `enable algorithm-type scrypt secret CiscoCCNA` in configuration mode. Verification displays `enable secret 9`, followed by the stored hash. section 11.3.1

SW1(config)# enable algorithm-type scrypt secret CiscoCCNA                    #1
SW1(config)# do show running-config | include enable
enable secret 9 $9$h.p1X8KVxbaILq$pNEykQjoAJbKCYfmBL9Hq8yPU/EqDGpoBkCIZ.s9GJA #2
#1 Configures an enable secret and hashes it with the scrypt algorithm
#2 The enable secret is saved as a hash, with the algorithm type indicated before the hash.

Shows the Cisco IOS command and running-configuration output, including the type 9 algorithm marker. section 11.3.1

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes
Defines the hash representation and algorithm marker, but does not explain scrypt internals or attack resistance.
Examples
Uses an `enable algorithm-type scrypt secret` command and verifies the resulting `enable secret 9` line.
What you can do after
Operate/configure a Cisco IOS enable secret with scrypt and recognize its type 9 running-configuration representation.
How it connects
Connects password authentication, enable secrets, Cisco IOS configuration, and scrypt.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.