Access Security Guide K/KA/KB.15.15

If “y/Y” is entered, the normal output of the command is displayed. If any other key is pressed,
the command is not executed and there is no output. The default is “n/N” when interactive mode
is disabled.
Show flash and show version command output
When using enhanced secure mode, the output from the show flash and show version commands
is slightly different.
Figure 350 Output of the show flash Command
Figure 351 Output of the show version Command
Show config commands
The show config commands that may show sensitive information on the console are:
show config
show running-config
show default-config
write terminal
When one of the above commands is executed in enhanced secure mode, the following prompt
displays:
Do you want to show sensitive information (y/n)?
If “Y/y” is entered, the normal command output is displayed on the console. If “N/n” is entered,
all the sensitive information is hidden and will be displayed as asterisks (“*****”). The default
option is “N/n” when interactive mode is disabled.
MIB CLI commands
When MIB CLI commands are executed in enhanced secure mode, the following prompt appears
before the sensitive information for the getmib or walkmib command is displayed:
This may show sensitive information. Continue (y/n)?
If “Y/y” is entered, the sensitive information is displayed in plain text. If ‘N/n’ is entered, the
command is not executed and there is no output. The default is “n/N” when interactive mode is
disabled.
When using enhanced secure mode, the secret input echo for the setmib command is not replaced
with asterisks, however, a warning message displays when this command is executed:
The setmib command should not be used in enhanced secure
mode.
Configuring 499