Login
- Table of Contents
-
- 01-Fundamentals Command Reference
- 00-Preface
- 01-CLI commands
- 02-RBAC commands
- 03-Login management commands
- 04-FTP and TFTP commands
- 05-File system management commands
- 06-Configuration file management commands
- 07-Software upgrade commands
- 08-ISSU commands
- 09-Emergency shell commands
- 10-Device management commands
- 11-Tcl commands
- 12-License management commands
- 13-Password recovery control command
- 14-Python commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 13-Password recovery control command | 57.07 KB |
password-recovery enable
Use password-recovery enable to enable password recovery capability.
Use undo password-recovery enable to disable password recovery capability.
Syntax
password-recovery enable
undo password-recovery enable
Default
Password recovery capability is enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command does not take effect on a device in FIPS mode. For more information about FIPS mode, see Security Configuration Guide.
This command is available only on the default MDC. For more information about MDC, see Virtual Technologies Configuration Guide.
Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus.
If password recovery capability is enabled, a console user can access the device configuration without authentication to configure new passwords.
If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.
To enhance system security, disable password recovery capability.
Table 1 summarizes options whose availability depends on the password recovery capability setting.
Table 1 BootWare options and password recovery capability compatibility matrix
|
BootWare menu option |
Password recovery enabled |
Password recovery disabled |
Tasks that can be performed |
|
Download Image Program To SDRAM And Run |
Yes |
No |
Load a system software image to SDRAM and run it. |
|
Update User Private File |
Yes |
No |
Download a file to the current storage medium. |
|
Skip Authentication for Console Login |
Yes |
No |
Enable console login without authentication. This is a one-time operation. It takes effective only for the first system boot or reboot after you choose this option. |
|
Modify Chassis ID Operation |
Yes |
No |
Switch between IRF mode and standalone mode, and change the member ID of the device. For more information about IRF, see Virtual Technologies Configuration Guide. |
|
Skip Current System Configuration |
Yes |
No |
Load the factory-default configuration without deleting the next-startup configuration file. This is a one-time operation. It takes effective only for the first system boot or reboot after you perform the operation. |
|
Restore to Factory Default Configuration |
No |
Yes |
Delete the next-startup configuration file and load the factory-default configuration. |
Examples
# Disable password recovery capability.
<Sysname> system-view
[Sysname] undo password-recovery enable
