Disabling Password Recovery - Cisco Catalyst 2960-XR Security Configuration Manual

Controlling Switch Access with Passwords and Privilege Levels
Command or Action
Step 3
service password-encryption
Example:
Switch(config)# service
password-encryption
Step 4 end
Example:
Switch(config)# end
Related Topics
Additional Password Security, on page 22
Example: Protecting Enable and Enable Secret Passwords with Encryption, on page 35

Disabling Password Recovery

Beginning in privileged EXEC mode, follow these steps to disable password recovery to protect the security
of your switch:
Before You Begin
If you disable password recovery, we recommend that you keep a backup copy of the configuration file on a
secure server in case the end user interrupts the boot process and sets the system back to default values. Do
not keep a backup copy of the configuration file on the switch. If the switch is operating in VTP transparent
mode, we recommend that you also keep a backup copy of the VLAN database file on a secure server. When
the switch is returned to the default system configuration, you can download the saved files to the switch by
using the Xmodem protocol.
SUMMARY STEPS
1. configure terminal
2. no service password-recovery
3. end
OL-29434-01
Purpose
(Optional) Encrypts the password when the password is defined or when
the configuration is written.
Encryption prevents the password from being readable in the configuration
file.
Returns to privileged EXEC mode.
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
Disabling Password Recovery
27