The Practice of Network Security: Deployment Strategies for Production Environments

4.7. Change Default Passwords!

Table 4.2 lists the default username/password combinations for commonly deployed devices. While these combinations are not necessarily the default on all devices manufactured by these vendors, they are used on enough devices that administrators should be concerned. If an attacker comes across one of these devices, the default combination is going to be the first tried. That’s why it is important to create an account, and then remove the default account.

Table 4.2. Default Usernames and Passwords

Vendor	Username	Password
Bay Networks	Manager	Manager
Cisco	cisco	cisco
Extreme	admin
Juniper	root
Nortel	admin	setup

Often, an administrator will create one, or several, accounts, without deleting the default account, ...