read only access and need to protect all sensitive passwords

Hi all,

i need to give read only access of my routers to an audit team .

i have no issue setting up a radius server to throug a exec level 7
.... which i customised on the router to allow only show

Privelege exec all level 7 show . i found that he cant view
routing config using " regular show run '' but with can view last saved
config with show sartup-config.

the issue is my radius server and their is no option to specify
type 5 md5 strong password .

i am ending up with showing my Radius key ..... as type 7 can be
easily de crepted .

......i also tried service password encryption..but it is again
using type 7 ...

Any chance of saving from over shoulder readng attack ?

Blogs and organic groups at http://www.ccie.net
Received on Sat Feb 16 2013 - 08:27:51 ART