[c-nsp] 7304 enable secret bug?

Nemeth Laszlo csirek at externet.hu
Wed Sep 20 09:51:19 EDT 2006


Hi

System image file is "disk0:c7300-is-mz.122-28.SB1.bin"
cisco 7300 (NSE100) processor (revision E) with 491520K/32768K bytes of memory.


My config:

aaa new-model
aaa authentication login default group tacacs+ enable
aaa authentication enable default group tacacs+ enable
aaa accounting exec default start-stop group tacacs+
<...>
line vty 0 4
  exec-timeout 0 0


I try to change the enable secret password.

border1(config)#enable secret a

and try telnet to the router:

Escape character is '^]'.
User Access Verification
Password: (typed: a :)

border1>en
Password:  (typed: a)
border1#

It's work :)

border1(config)#enable secret aa

and try telnet:
Escape character is '^]'.
User Access Verification

Password: (aa)

border1>en
Password:   (aa)
border1#

Yessss :)

But:

border1(config)#enable secret aaa

and try telnet:

User Access Verification

Password: (aaa)

border1>en
Password: (aaa)
% Access denied
border1>

So if the secret password much than 2 chars, the enable doesn't work. Why?


Laci


More information about the cisco-nsp mailing list