Login
- Table of Contents
-
- 01-Fundamentals Command Reference
- 00-Preface
- 01-CLI commands
- 02-RBAC commands
- 03-Login management commands
- 04-FTP and TFTP commands
- 05-File system management commands
- 06-Configuration file management commands
- 07-Software upgrade commands
- 08-ISSU commands
- 09-Device management commands
- 10-Tcl commands
- 11-Password recovery control command
- 12-Python commands
- 13-License management commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 11-Password recovery control command | 30.62 KB |
Password recovery control command
password-recovery enable
Use password-recovery enable to enable password recovery capability.
Use undo password-recovery enable to disable password recovery capability.
Syntax
password-recovery enable
undo password-recovery enable
Default
Password recovery capability is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus.
If password recovery capability is enabled, a console user can access the device configuration without authentication to configure new passwords.
If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.
To enhance system security, disable password recovery capability.
Table 1 summarizes options whose availability depends on the password recovery capability setting.
Table 1 BootWare options and password recovery capability compatibility matrix
|
BootWare menu option |
Password recovery enabled |
Password recovery disabled |
Tasks that can be performed |
|
Ctrl+R: Download image to SDRAM and run |
Yes |
No |
Load and run Comware software images in SDRAM. |
|
Set configuration file |
Yes |
No |
Specify the main and backup configuration files for the next startup. |
|
Ctrl+P: Change authentication for console login |
Yes |
No |
Skip console login authentication at the next startup. The skip is a one-time operation. It takes effect only for the first system boot or reboot after you choose this option. |
|
Skip current system configuration |
Yes |
No |
Skip the configuration file at the next startup. The skip is a one-time operation. It takes effective only for the first system boot or reboot after you choose this option. This option does not delete the configuration file. |
|
Restore to factory default configuration |
No |
Yes |
Delete the next-startup configuration file and load the factory-default configuration. |
Examples
# Disable password recovery capability.
<Sysname> system-view
[Sysname] undo password-recovery enable
