Disabling Password Recovery - Cisco IPS-4255-K9 - Intrusion Protection Sys 4255 Installation Manual

Recovering the Password
Session in to the NME IPS.
Step 4
router# service-module ids-sensor slot/port session
Example
router# service-module ids-sensor 1/0 session
Press Control-shift-6 followed by x to navigate to the router CLI.
Step 5
Reset the NME IPS from the router console.
Step 6
router# service-module ids-sensor 1/0 reset
Press Enter to return to the router console.
Step 7
When prompted for boot options, enter
Step 8
Clear the password.
Step 9
ServicesEngine boot-loader# clear password
The NME IPS reboots. The password is reset to cisco. Log in to the CLI with username cisco and
password cisco. You can then change the password.

Disabling Password Recovery

If you try to recover the password on a sensor on which password recovery is disabled, the process
Caution
proceeds with no errors or warnings; however, the password is not reset. If you cannot log in to the sensor
because you have forgotten the password, and password recovery is set to disabled, you must reimage
your sensor.
Password recovery is enabled by default. You can disable password recovery through the CLI, IDM, or
IME.
Disabling Password Recovery Using the CLI
To disable password recovery in the CLI, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Enter global configuration mode.
Step 2
sensor# configure terminal
Enter host mode.
Step 3
sensor(config)# service host
Disable password recovery.
Step 4
sensor(config-hos)# password-recovery disallowed
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0
A-14
quickly. You are now in the bootloader.
***
Chapter A Troubleshooting
OL-18504-01