Service Password-Recovery - Cisco 300 Series Cli Manual

17
258
The second command sets a password that has already been encrypted. It will
copied to the configuration file just as it is entered. To use it, the user must know its
unencrypted form.
switchxxxxxx (config)# enable password level 7 let-me-in
switchxxxxxx
(config)# enable password level 15 encrypted
4b529f21c93d4706090285b0c10172eb073ffebc4
17.9

service password-recovery

Use the service password-recovery Global Configuration mode command to
enable the password-recovery mechanism. This mechanism allows an end user,
with physical access to the console port of the device, to enter the boot menu and
trigger the password recovery process. Use the no service password-recovery
command to disable the password-recovery mechanism. When the
password-recovery mechanism is disabled, accessing the boot menu is still
allowed and the user can trigger the password recovery process. The difference
is, that in this case, all the configuration files and all the user files are removed. The
following log message is generated to the terminal: "All the configuration and user
files were removed".
Syntax
service password-recovery
no service password-recovery
Parameters
N/A
Default Configuration
The service password recovery is enabled by default.
Command Mode
Global Configuration mode
User Guidelines
•
If password recovery is enabled, the user can access the boot menu and
trigger the password recovery in the boot menu. All configuration files and
user files are kept.
Authentication, Authorization and Accounting (AAA) Commands
78-21075-01 Command Line Interface Reference Guide