Secure way to save the local credentials?

Question

In the network administration world, normally we configure the network devices to use an AAA server (Radius or tacacs+). As a backup, in case the AAA server is not reachable, we configure the network device to use its local database (local username and password).

I am looking for a way to manage the local credentials for the network devices. Any suggestions?

Yes, I figured that. There are password managers for teams. Some are enterprise ready, like CyberArk. — schroeder, Mar 06 '17 at 16:06
I want to be able to access my devices in case of aaa failure using the local device credentials, so I need password management solution and I am wondering if there is something more specific for network access — Mr.lock, Mar 06 '17 at 16:18

score 0 · Accepted Answer · answered Mar 06 '17 at 16:30

Enterprise password managers offer you the ability to store these types of things in a central store for admins to use.

You can restrict access, log when people request credentials, and some interface directly with the device and change the credentials once used or act as a 'wrapper' so you ssh through the password system in order to get to the end device.

Lots of options. A quick vendor search will reward you with rich results.

Secure way to save the local credentials?

1 Answers1