How I can change the Username itself, not just the password.

alexthefool wrote:
It is a simple math, man. Guessing one password is easier than guessing two. If you think otherwise please explain.:p

Let’s keep it simple just for an easy to calculate example, passwords using numbers only; Using two passwords; Password 1 – 4 digits – 10,000 possible combinations Password2 – 4 digits – 10,000 possible combinations The user is not informed which one is incorrect, so the number of possible combinations of the two passwords is 10,000 * 10,000 = 100,000,000 Using one password; Password – 8 digits – 100,000,000 possible combinations Unless people are using the entire 31 possible characters of the password then there’s nothing gained security –wise by having a changeable User ID. If people are using a 31 character password properly then the number of unique passwords is astronomical, will never be guessed. The User ID is for identification, not a password, and in this case of the home router – single admin function it’s fairly redundant. Use the password properly and all is well. These Cisco 7000 series devices cost many thousands, this particular one is about £32,000 in the UK). They have a fixed Admin account that cannot be changed, and only require a password to be entered to access that user level. They are considered highly secure and will not be out of place in a military network (I use them). http://www.cisco.com/c/en/us/products/collateral/switches/nexus-7000-10-slot-switch/Data_Sheet_C78-437757.html

fordem wrote:
You can, if you so choose, create users, with different levels of access on most Cisco IOS versions.

I know, but can you delete/remove/rename the Admin User? While everyone is correct in saying that having a user selectable Admin ID should be relatively easy, it would require a change to router code, something else to store. It would as has been mentioned lead to more issues with support, and more people who having forgotten the User ID / Password having to factory reset, a password alone is easier to remember. But the argument that this makes things more secure leads me to question why people might think that the password alone is not secure, and if the password can be ‘guessed’ then why can’t the User ID be equally easily guessed? The password field is 31 characters long, and if the admin can’t make a secure password out of that then changing their User ID to something other than Admin isn’t likely to help at all.