- [Narrator] Now that we understand the difference between
user mode and privilege mode,
let's go ahead and jump into privilege mode.
So enable, I hit the tab key,
typically just do it short with en.
Okay from here our goal is in this section
is to configure our administrative functions,
which'll help us to do a couple things.
One of 'em is to be able to troubleshoot.
Let me give you an example.
So I go up, run into global config
if I did not change the default host name
on my routers and switches,
everything would be router and switch.
It would be very difficult to troubleshoot
at that point, right?
So a host name corp is where we're at,
and the next thing or the last thing
it'll do in this section
is actually security this will give us,
and that'd be by setting our passwords,
but in the mean time let's also
set our banner, this stands for message of the day.
This is my corp router.
So if anyone logs into this router
or into a switch, either way,
they will see the banner that you created.
Typically you're gonna say
if you're not part of the Acme network
you must disconnect immediately.
The next thing is,
is the interface description.
So I'm gonna use the interface command
to get into my fastEthernet 0/0.
I'm gonna use the description command
so when I look at my router switch
I know where those interfaces go and connect to.
Okay so next I'm going to add it to my serial interfaces.
I'm just gonna up arrow,
and say connection to, I'm gonna say wAn connection,
and I can add 'em on my other interfaces as well,
but let's go ahead and run to our password.
So the first thing I want to set,
I'm gonna go ahead and do exit,
I don't really need to, actually let me not do an exit here,
show you what happens.
I'm gonna enable secret, now remember,
I'll just make it something simple here,
enable secret supersedes the enable password I've set.
Notice it set me back to global config
where this was supposed to be set.
All right, so I set the enable secret.
I don't need to set the enable password,
because if I did it wouldn't be used anyways.
But the other passwords we need to
be worried about or concerned about,
need to set are out of band interfaces.
Those are the console and auxiliary ports.
So I'm gonna go ahead and set choose the line console zero.
Password, console, oh,
there is a third step here.
I have to tell it where the password is,
so when you try to get in it says,
oh where do I go look to see if the password matches?
In this case by saying login,
we're saying it's in the active configuration file.
And I'm gonna do the same thing
for the auxiliary port.
Password aux, again, don't set your password to those.
And then enable the login process.
This is important, you must enable.
So it's three steps.
Choose the line, set your password,
enable the login process.
Now on this next one I absolutely
have to go back to global config,
because I want to use the help prompt,
and I can't do that from within config line.
So line vty 0 space question mark
is gonna show me my last line number
'cause I want to configure all lines.
Okay, so I'm configuring all my vty lines.
Right, so line vty 0 through 988.
Password, and then enable the login process,
understanding that the vty lines
have login enabled by default,
meaning you cannot telnet into a Cisco router or switch
by default without setting some sort of password,
or telling it where the password is.
Okay so the last thing I want to do,
I'm going to do control + Z here,
and I'm gonna do a show run,
hit my tab key to show you the whole command.
And notice at the top I have my enable secret,
which is encrypted.
And we'll go down and let's see if
we can see our descriptions.
There's a connection to corp LAN,
Serial0 zero description,
notice there's no IP or shutdown,
that's our next section.
And then let's go down to the bottom
and we're gonna see our passwords,
but they're not encrypted are they?
We want to make sure our passwords are encrypted,
so one last thing in this section,
and that is service password encryption.
So I can do an exit or control + Z
and type a show run or show running config.
I can also do it from here with the do command,
do show run, same thing for within a configuration prompt
I can run commands using the do command.
So now we can see at the bottom
of my active configuration file,
I can see my banner and my encrypted passwords.
So the service password encryption
encrypts all current and future passwords.
So those are the basic configurations you need
to both help you troubleshoot
and have security on your router switch,
host names, banners, passwords and interface descriptions.