Disable Password Recovery
There are times when you may want to disable password recovery (for example if someone is working in high secure environment).
Use the following command to disable password recovery
Router(config)#no service password-recovery
WARNING:
Executing this command will disable password recovery mechanism.
Do not execute this command without another plan for
password recovery.
Are you sure you want to continue? [yes/no]: yes
Router(config)#
The above command will disable all access to the ROMMON. Be careful when using the above command, as there is no way to recover password.
The following message is displayed during boot up when “no service password-recovery” command is configured.
PASSWORD RECOVERY FUNCTIONALITY IS DISABLED
System Bootstrap, Version 11.1(19)AA, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
...
About the author
Multi skilled Cisco network engineer, web programmer and system administrator, lost in different career path :-)
| This entry was posted by Arsalan A. Suzuki on August 26, 2010 at 8:08 pm, and is filed under Cisco, IOS, Security, Tips. Follow any responses to this post through RSS 2.0. You can leave a response or trackback from your own site. |
about 1 year ago
So, if no password-recovery has been enabled on a router, is there anyway to still get into the router and reset to factory defaults? I have a 1900 that's been sitting in the corner of our server room that was initially used for testing. I would now like to use it, but I don't have the password and the no password-recovery has been set. Any suggestions?
about 1 year ago
Check this article for password recovery http://blog.arsalan.biz/cisco/cisco-router-passwo…
Even when password-recovery is disabled you can reset the startup config by pressing break command during boot up process.
Details can be found at http://www.cisco.com/en/US/docs/ios/12_3/12_3y/12…