nanog mailing list archives
Re: Cisco, haven't we learned anything? (technician reset)
From: Jay Hennigan <jay () west net>
Date: Thu, 12 Jan 2006 16:35:03 -0800
Rob Thomas wrote:
Hi, NANOGers. ] On the other hand, the most common practice to hack routers today, is ] still to try and access the devices with the notoriously famous default ] login/password for Cisco devices: cisco/cisco. This is NOT a default password in the IOS. The use of "cisco" as the access and enable passwords is a common practice by users, but it isn't bundled in the IOS. I've heard it began in training classes, where students were taught to use "cisco" as the passwords.
Actually, and fairly recently, this IS a default password in IOS. New out-of-box 28xx series routers have cisco/cisco installed as the default password with privilege 15 (full access). This is a recent development.
To be fair, the box also has a huge default login banner urging the user to delete that username/password pair. But we all know how much attention is paid to huge, verbose banners, disclaimers, click-to-agree dialog boxes, etc.
-- Jay Hennigan - CCIE #7880 - Network Administration - jay () west net NetLojix Communications, Inc. - http://www.netlojix.com/ WestNet: Connecting you to the planet. 805 884-6323
Current thread:
- Re: Is my router owned? How would I know?, (continued)
- Re: Is my router owned? How would I know? Christopher L. Morrow (Jan 12)
- Re: Is my router owned? How would I know? Joseph S D Yao (Jan 13)
- Re: Is my router owned? How would I know? Mikael Abrahamsson (Jan 12)
- Re: Is my router owned? How would I know? Alexei Roudnev (Jan 14)
- Re: Is my router owned? How would I know? Mikael Abrahamsson (Jan 14)
- Re: Is my router owned? How would I know? Alexei Roudnev (Jan 14)
- Re: Cisco, haven't we learned anything? (technician reset) Brett Frankenberger (Jan 12)
- Re: Cisco, haven't we learned anything? (technician reset) John Kinsella (Jan 12)
- Re: Cisco, haven't we learned anything? (technician reset) william(at)elan.net (Jan 12)
- Re: Cisco, haven't we learned anything? (technician reset) Jay Hennigan (Jan 12)
- Re: Cisco, haven't we learned anything? (technician reset) william(at)elan.net (Jan 12)