Password recovery cisco

No Service Password-Recovery Last Updated: January 18, 2012 The No Service Password-Recovery feature is a security enhancement that prevents anyone with console access from accessing the router configuration and clearing the password. It also prevents anyone from changing the configuration register values and accessing NVRAM. Finding Feature Information Prerequisites for No Service Password-Recovery Information About No Service Password-Recovery How to Enable No Service Password-Recovery Configuration Examples for No Service Password-Recovery Additional References Feature Information for No Service Password-Recovery Finding Feature Information Your software release may not support all the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release. To find information about the features documented in this module, and to see a list of the releases in which each feature is supported, see the Feature Information Table at the end of this document. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required. Prerequisites for No Service Password-Recovery You must download and install ROM monitor (ROMMON) version 12.2(11)YV1 before you can use this feature. Information About No Service Password-Recovery Cisco Password Recovery Procedure Configuration Registers and System Boot Configuration Cisco Password Recovery Procedure The Cisco IOS software provides a password recovery procedure that relies upon gaining access to ROMMON mode using the Break key during system startup. When the router software is loaded from ROMMON mode, the configuration is updated with the new password. The password recovery procedure enables anyone with console access, the ability to access the router and its network. The No Service Password-Recovery feature prevents the completion of the Break key sequence and the entering of ROMMON mode during system startups and reloads. Configuration

Link None To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL: RFCs RFCs Title No new or modified RFCs are supported by this feature. -- Technical Assistance Description Link The Cisco Support website provides extensive online resources, including documentation and tools for troubleshooting and resolving technical issues with Cisco products and technologies. To receive security and technical information about your products, you can subscribe to various services, such as the Product Alert Tool (accessed from Field Notices), the Cisco Technical Services Newsletter, and Really Simple Syndication (RSS) Feeds. Access to most tools on the Cisco Support website requires a Cisco.com user ID and password. Feature Information for No Service Password-Recovery The following table provides release information about the feature or features described in this module. This table lists only the software release that introduced support for a given feature in a given software release train. Unless noted otherwise, subsequent releases of that software release train also support that feature. Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to www.cisco.com/go/cfn. An account on Cisco.com is not required. Table 1 Feature Information for No Service Password-Recovery Feature Name Releases Feature Information No Service Password-Recovery 12.3(8)YA 12.3(14)T The No Service Password-Recovery feature is a security enhancement that prevents anyone with console access from accessing the router configuration and clearing the password. It also prevents anyone from changing the configuration register values and accessing NVRAM. This feature was introduced in Cisco IOS Release 12.3(8)YA. This feature was integrated into Cisco IOS Release 12.3(14)T. The following command was introduced: service password-recovery. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the

Modem enable transport preferred all transport output allline aux 0line vty 0 4!scheduler max-task-time 5000endRouter# show running-config | incl serviceno service padservice timestamps debug datetime msecservice timestamps log datetime msecno service password-encryptionno service password-recoveryend Configuration Examples for No Service Password-Recovery Disabling Password Recovery Example Disabling Password Recovery Example The following example shows how to obtain the configuration register setting (which is set to autoboot), disable password recovery capability, and then verify that the configuration persists through a system reload: Router# show versionCisco Internetwork Operating System Software IOS (tm) 5300 Software (C7200-P-M), Version 12.3(8)YA, RELEASE SOFTWARE (fc1)TAC Support: (c) 1986-2004 by Cisco Systems, Inc.Compiled Wed 05-Mar-04 10:16 by xxxImage text-base: 0x60008954, data-base: 0x61964000ROM: System Bootstrap, Version 12.3(8)YA, RELEASE SOFTWARE (fc1)...125440K bytes of ATA PCMCIA card at slot 0 (Sector size 512 bytes).8192K bytes of Flash internal SIMM (Sector size 256K).Configuration register is 0x2102Router# configure terminalRouter(config)# no service password-recoveryWARNING:Executing this command will disable the password recovery mechanism.Do not execute this command without another plan for password recovery.Are you sure you want to continue? [yes/no]: yes...Router(config)# exitRouter#Router# reloadProceed with reload? [confirm] yes00:01:54: %SYS-5-RELOAD: Reload requestedSystem Bootstrap, Version 12.3...Copyright (c) 1994-2004 by cisco Systems, Inc.C7400 platform with 262144 Kbytes of main memoryPASSWORD RECOVERY FUNCTIONALITY IS DISABLED... Additional References The following sections provide references related to the No Service Password-Recovery feature. Related Documents Related Topic Document Title Setting, changing, and recovering lost passwords " Configuring Security with Passwords, Privilege Levels, and Login Usernames for CLI Sessions on Networking Devices " feature module Loading system images and rebooting " Using the Cisco IOS Integrated File System " feature module Security commands: complete command syntax, command mode, command history, defaults, usage guidelines, and examples Cisco IOS Security Command Reference Cisco IOS commands Cisco IOS Master Commands List, All Releases Standards Standards Title None -- MIBs MIBs MIBs