Which Cisco IOS Image Supports enable secret?
Look at your boot image using the show version command from your normal operating mode (Full Cisco IOS image) to see whether the boot image supports the enable secret command. If it does, remove enable password. If the boot image does not support enable secret, note the following caveats: • Setting an enable password might be unnecessary if you have physical security so that no one can reload the device to the boot image. • If someone has physical access to the device, he can easily subvert the device security without needing to access the boot image. • If you set the enable password to the same as the enable secret, you have made the enable secret as prone to attack as the enable password. • If you set enable password to a different value because the boot image doesn’t support enable secret, your router administrators must remember a new password that is used infrequently on ROMs that don’t support the enable secret command. By having a separate enable password, administrators may not
