Disabling The Mode Button - Cisco M10-RM Software Manual

Disabling the Mode Button

Disabling the Mode Button
You can disable the mode button on access points having a console port by using the [no] boot
mode-button command. This command prevents password recovery and is used to prevent unauthorized
users from gaining access to the access point CLI.
This command disables password recovery. If you lose the privileged EXEC mode password for the
Caution
access point after entering this command, you will need to contact the Cisco Technical Assistance Center
(TAC) to regain access to the access point CLI.
The mode button is enabled by default. Beginning in the privilege EXEC mode, follow these steps to
disable the access point's mode button.
Command
Step 1 configure terminal
Step 2
no boot mode-button
Step 3 end
You can check the status of the mode-button by executing the show boot or show boot mode-button
commands in the privileged EXEC mode. The status does not appear in the running configuration. The
following shows a typical response to the show boot and show boot mode-button commands:
ap#show boot
BOOT path-list: flash:/c1200-k9w7-mx-v123_7_ja.20050430/c1200-k9w7-mx.v123_7_ja.20050430
Config file: flash:/config.txt
Private Config file: flash:/private-config
Enable Break: no
Manual boot:no
Mode button:on
Enable IOS break: no
HELPER path-list:
NVRAM/Config file
ap#show boot mode-button
on
ap#
As long as the privileged EXEC password is known, you can restore the mode button to normal operation
Note
using the boot mode-button command.
Cisco IOS Software Configuration Guide for Cisco Aironet Access Points
5-2
Purpose
Enter global configuration mode.
Disables the access point's mode button.
Note
buffer size: 32768
Chapter 5 Administering the Access PointWireless Device Access
It is not necessary to save the configuration.
OL-14209-01