Lab 3.1.

3 Configuring Router Passwords – Instructor Version 2500

Objective

• Configure a password for console login to user EXEC mode.

• Configure a password for virtual terminal (Telnet) sessions.
• Configure a secret password for privileged EXEC mode.

Background/Preparation
Any router that meets the interface requirements may be used. Possible routers include 800, 1600,
1700, 2500, 2600 routers, or a combination. Refer to the chart at the end of the lab to correctly
identify the interface identifiers to be used based on the equipment in the lab. The configuration
output used in this lab is produced from 1721 series routers. Any other router used may produce
slightly different output. The following steps are intended to be executed on each router unless
specifically instructed otherwise.
Start a HyperTerminal session as performed in the Establishing a HyperTerminal session lab.
Note: Go to the erase and reload instructions at the end of this lab. Perform those steps on all
routers in this lab assignment before continuing.

Step 1 Login to the router in user EXEC mode

a. Connect to the router and login.
b. What prompt did the router display? Router>
c. What does this prompt mean? The user has entered the user EXEC mode of the router.

25 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Step 2 Login to the router in privileged EXEC mode
a. Enter enable at the user EXEC mode prompt.
Router>enable
b. What prompt did the router display? Router#
c. What does this prompt mean? The user has entered the privileged EXEC mode of the router.

Step 3 Enter global configuration mode

a. Enter configure terminal at the privilege EXEC mode prompt.
Router#configure terminal
b. What prompt did the router display? Router(config)#
c. What does this prompt mean? The user has entered the global configuration mode of the router.

Step 4 Enter a hostname of GAD for this router

a. Enter hostname GAD at the prompt.
Router(config)#hostname GAD
b. What prompt did the router display? GAD(config)#
c. What does this prompt mean?
It replaces the default hostname Router with the new hostname GAD.

Step 5 Configure and exit

Configure the console password on the router and exit from line console:

GAD(config)#line console 0
GAD(config-line)#password cisco
GAD(config-line)#login
GAD(config-line)#exit
GAD(config)#

Step 6 Configure and exit

Configure the password on the virtual terminal lines and exit line mode:

GAD(config)#line vty 0 4
GAD(config-line)#password cisco
GAD(config-line)#login
GAD(config-line)#exit
GAD(config)#

Step 7 Configure the enable password

Configure the enable password on the router and exit from global configuration mode:

GAD(config)#enable password cisco

GAD(config)#exit

26 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Step 8 Return to the user EXEC mode
Return to the user EXEC mode by entering the disable command:

GAD#disable

Step 9 Enter the privileged EXEC mode again

This time a prompt for a password will show. Enter cisco but the characters will not be seen on the
line.

GAD>enable
Password:cisco

Step 10 Return to the configuration mode

Return to the configuration mode by entering configure terminal:

GAD#configure terminal

Step 11 Configure the enable secret password

Configure the enable secret password and exit from global configuration mode:

GAD(config)#enable secret class

GAD(config)#exit

Note: Remember the enable secret password is encrypted from the configuration view. Also do
not type enable secret password class, or the secret password will be password, not
class.

Step 12 Return to the user EXEC mode

Return to the user EXEC mode by entering the command disable:

GAD#disable
GAD>

Step 13 Enter the privileged EXEC mode again

A prompt for a password will show. Enter cisco. The characters will not be seen on the line. If it fails,
continue until the bad secrets message is displayed:

GAD>enable
Password:cisco
Password:cisco
Password:cisco
% Bad secrets

27 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Step 14 Enter the privileged EXEC mode again
A prompt for a password will show. Enter class. The characters will not be displayed on the line:

GAD>enable
Password:class
GAD#

Note: The enable secret password takes precedence over the enable password. So once an
enable secret password is entered the enable password no longer is accepted.

Step 15 Show the routers running configuration

GAD#show running-config
a. Is there an encrypted password? Yes
b. Are there any other passwords? Yes
c. Are any of the other passwords encrypted? No

Upon completion of the previous steps, logoff by typing exit. Turn the router off.

28 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Erasing and reloading the router
Enter into the privileged EXEC mode by typing enable.
If prompted for a password, enter class. If “class” does not work, ask the instructor for assistance.
Router>enable
At the privileged EXEC mode, enter the command erase startup-config.
Router#erase startup-config
The responding line prompt will be:
Erasing the nvram filesystem will remove all files! Continue?
[confirm]
Press Enter to confirm.
The response should be:
Erase of nvram: complete
Now at the privileged EXEC mode, enter the command reload.
Router#reload
The responding line prompt will be:
System configuration has been modified. Save? [yes/no]:
Type n and then press Enter.
The responding line prompt will be:
Proceed with reload? [confirm]
Press Enter to confirm.
In the first line of the response will be:
Reload requested by console.
After the router has reloaded the line prompt will be:
Would you like to enter the initial configuration dialog? [yes/no]:
Type n and then press Enter.
The responding line prompt will be:
Press RETURN to get started!
Press Enter.
The router is ready for the assigned lab to be performed.

29 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Router Interface Summary
Router Ethernet Ethernet Serial Serial Interface
Model Interface #1 Interface #2 Interface #1 Interface #2 #5
800 (806) Ethernet 0 (E0) Ethernet 1 (E1)
1600 Ethernet 0 (E0) Ethernet 1 (E1) Serial 0 (S0) Serial 1 (S1)
1700 FastEthernet 0 (FA0) FastEthernet 1 (FA1) Serial 0 (S0) Serial 1 (S1)
2500 Ethernet 0 (E0) Ethernet 1 (E1) Serial 0 (S0) Serial 1 (S1)
2600 FastEthernet 0/0 FastEthernet 0/1 (FA0/1) Serial 0/0 (S0/0) Serial 0/1
(FA0/0) (S0/1)
In order to find out exactly how the router is configured, look at the interfaces. This will identify the type of router
as well as how many interfaces the router has. There is no way to effectively list all of the combinations of
configurations for each router class. What is provided are the identifiers for the possible combinations of interfaces
in the device. This interface chart does not include any other type of interface even though a specific router may
contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation
that can be used in IOS command to represent the interface.

30 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
GAD#show running-config
Building configuration...

Current configuration : 536 bytes

!
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname GAD
!
enable secret 5 $1$YFb5$YNHeLpxK/iRzHSdsdHL2g/
enable password cisco
!!
ip subnet-zero
!
interface Ethernet0
no ip address
shutdown
!
interface Serial0
no ip address
shutdown
no fair-queue
!
interface Serial1
no ip address
shutdown
!
ip classless
ip http server
!
!
line con 0
password cisco
login
line aux 0
line vty 0 4
password cisco
login
!
end

31 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Lab 3.1.3 Configuring Router Passwords – Instructor Version 2600

Objective

• Configure a password for console login to user EXEC mode.

• Configure a password for virtual terminal (Telnet) sessions.
• Configure a secret password for privileged EXEC mode.

Background/Preparation
Any router that meets the interface requirements may be used. Possible routers include 800, 1600,
1700, 2500, 2600 routers, or a combination. Refer to the chart at the end of the lab to correctly
identify the interface identifiers to be used based on the equipment in the lab. The configuration
output used in this lab is produced from 1721 series routers. Any other router used may produce
slightly different output. The following steps are intended to be executed on each router unless
specifically instructed otherwise.
Start a HyperTerminal session as performed in the Establishing a HyperTerminal session lab.
Note: Go to the erase and reload instructions at the end of this lab. Perform those steps on all
routers in this lab assignment before continuing.

Step 1 Login to the router in user EXEC mode

a. Connect to the router and login.
b. What prompt did the router display? Router>
c. What does this prompt mean? You have entered the router user EXEC mode

440 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Step 2 Login to the router in privileged EXEC mode
a. Enter enable at the user EXEC mode prompt.
Router>enable
b. What prompt did the router display? Router#
c. What does this prompt mean? The user has entered the privileged EXEC mode of the router.

Step 3 Enter global configuration mode

a. Enter configure terminal at the privilege EXEC mode prompt.
Router#configure terminal
b. What prompt did the router display? Router(config)#
c. What does this prompt mean? The user has entered the global configuration mode of the router.

Step 4 Enter a hostname of GAD for this router

a. Enter hostname GAD at the prompt.
Router(config)#hostname GAD
b. What prompt did the router display? GAD(config)#
c. What does this prompt mean?
Replaces the hostname with GAD and places the router in global configuration mode

Step 5 Configure and exit

Configure the console password on the router and exit from line console:

GAD(config)#line console 0
GAD(config-line)#password cisco
GAD(config-line)#login
GAD(config-line)#exit
GAD(config)#

Step 6 Configure and exit

Configure the password on the virtual terminal lines and exit line mode:

GAD(config)#line vty 0 4
GAD(config-line)#password cisco
GAD(config-line)#login
GAD(config-line)#exit
GAD(config)#

Step 7 Configure the enable password

Configure the enable password on the router and exit from global configuration mode:

GAD(config)#enable password cisco

GAD(config)#exit

441 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Step 8 Return to the user EXEC mode
Return to the user EXEC mode by entering the disable command:

GAD#disable

Step 9 Enter the privileged EXEC mode again

This time a prompt for a password will show. Enter cisco but the characters will not be seen on the
line.

GAD>enable
Password:cisco

Step 10 Return to the configuration mode

Return to the configuration mode by entering configure terminal:

GAD#configure terminal

Step 11 Configure the enable secret password

Configure the enable secret password and exit from global configuration mode:

GAD(config)#enable secret class

GAD(config)#exit

Note: Remember the enable secret password is encrypted from the configuration view. Also do
not type enable secret password class, or the secret password will be password, not
class.

Step 12 Return to the user EXEC mode

Return to the user EXEC mode by entering the command disable:

GAD#disable
GAD>

Step 13 Enter the privileged EXEC mode again

A prompt for a password will show. Enter cisco. The characters will not be seen on the line. If it fails,
continue until the bad secrets message is displayed:

GAD>enable
Password:cisco
Password:cisco
Password:cisco
% Bad secrets

442 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Step 14 Enter the privileged EXEC mode again
A prompt for a password will show. Enter class. The characters will not be displayed on the line:

GAD>enable
Password:class
GAD#

Note: The enable secret password takes precedence over the enable password. So once an
enable secret password is entered the enable password no longer is accepted.

Step 15 Show the routers running configuration

GAD#show running-config
a. Is there an encrypted password? Yes
b. Are there any other passwords? Yes
c. Are any of the other passwords encrypted? No

Upon completion of the previous steps, logoff by typing exit. Turn the router off.

443 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Erasing and reloading the router
Enter into the privileged EXEC mode by typing enable.
If prompted for a password, enter class. If “class” does not work, ask the instructor for assistance.
Router>enable
At the privileged EXEC mode, enter the command erase startup-config.
Router#erase startup-config
The responding line prompt will be:
Erasing the nvram filesystem will remove all files! Continue?
[confirm]
Press Enter to confirm.
The response should be:
Erase of nvram: complete
Now at the privileged EXEC mode, enter the command reload.
Router#reload
The responding line prompt will be:
System configuration has been modified. Save? [yes/no]:
Type n and then press Enter.
The responding line prompt will be:
Proceed with reload? [confirm]
Press Enter to confirm.
In the first line of the response will be:
Reload requested by console.
After the router has reloaded the line prompt will be:
Would you like to enter the initial configuration dialog? [yes/no]:
Type n and then press Enter.
The responding line prompt will be:
Press RETURN to get started!
Press Enter.
The router is ready for the assigned lab to be performed.

444 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
Router Interface Summary
Router Ethernet Ethernet Serial Serial Interface
Model Interface #1 Interface #2 Interface #1 Interface #2 #5
800 (806) Ethernet 0 (E0) Ethernet 1 (E1)
1600 Ethernet 0 (E0) Ethernet 1 (E1) Serial 0 (S0) Serial 1 (S1)
1700 FastEthernet 0 (FA0) FastEthernet 1 (FA1) Serial 0 (S0) Serial 1 (S1)
2500 Ethernet 0 (E0) Ethernet 1 (E1) Serial 0 (S0) Serial 1 (S1)
2600 FastEthernet 0/0 FastEthernet 0/1 (FA0/1) Serial 0/0 (S0/0) Serial 0/1
(FA0/0) (S0/1)
In order to find out exactly how the router is configured, look at the interfaces. This will identify the type of router
as well as how many interfaces the router has. There is no way to effectively list all of the combinations of
configurations for each router class. What is provided are the identifiers for the possible combinations of interfaces
in the device. This interface chart does not include any other type of interface even though a specific router may
contain one. An example of this might be an ISDN BRI interface. The string in parenthesis is the legal abbreviation
that can be used in IOS command to represent the interface.

445 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.
GAD#show running-config
Building configuration...

Current configuration : 536 bytes

!
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname GAD
!
enable secret 5 $1$YFb5$YNHeLpxK/iRzHSdsdHL2g/
enable password cisco
!!
ip subnet-zero
!
interface FastEthernet0/0
no ip address
shutdown
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface Serial0/1
no ip address
shutdown
!
ip classless
ip http server
!
!
line con 0
password cisco
login
line aux 0
line vty 0 4
password cisco
login
!
end

446 - 833 CCNA 2: Routers and Routing Basics v 3.1 - Lab 3.1.3 Copyright  2003, Cisco Systems, Inc.