Filter
Top Products
Authentication, Authorization, and Accounting Commands on Cisco IOS XR Software
secret
SR-50
Cisco IOS XR System Security Command Reference
secret
To create a secure login secret for a user, use the secret command in username or line configuration
mode. To remove the secure secret, use the no form of this command.
secret {0 | 5} secret
no secret {0 | 5} secret
Syntax Description
Defaults No password is specified.
Command Modes Username configuration
Line configuration
Command History
Usage Guidelines To use this command, you must be in a user group associated with a task group that includes the proper
task IDs. For detailed information about user groups and task IDs, see the Configuring AAA Services on
Cisco IOS XR Software module of the Cisco IOS XR System Security Configuration Guide.
You can specify one of two types of secure secrets: encrypted or clear text.
When an EXEC process is started on a line that has password protection, the process prompts for the
secret. If the user enters the correct secret, the process issues the prompt. The user can try three times to
enter a secret before the process exits and returns the terminal to the idle state.
Secrets are one-way encrypted and should be used for applications such as login that do not need a
decryptable secret.
Note The show running command does not display the login password in clear text when the 0 option is used
to specify an unecrypted password.
Task ID
0 Specifies that an unencrypted (clear text) secure secret follows.
5 Specifies that an encrypted secure secret follows.
secret Character-string secret to be entered by the user to log in.
Release Modification
Release 2.0 This command was introduced on the Cisco CRS-1.
Release 3.0 No modification.
Release 3.2 This command was supported on the Cisco XR 12000 Series Router.
Release 3.3.0 The password argument was replaced with the secret argument.
Task ID Operations
aaa read, write