Contents

Device hardening commands· 1

password-recovery enable· 1

usb disable· 1

Device hardening commands

password-recovery enable

Use password-recovery enable to enable password recovery capability.

Use undo password-recovery enable to disable password recovery capability.

Syntax

password-recovery enable

undo password-recovery enable

Default

Password recovery capability is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Password recovery capability controls console user access to the device configuration and SDRAM from BootWare menus.

If password recovery capability is enabled, a console user can access the device configuration without authentication to configure new passwords.

If password recovery capability is disabled, console users must restore the factory-default configuration before they can configure new passwords. Restoring the factory-default configuration deletes the next-startup configuration files.

To enhance system security, disable password recovery capability.

To access the device configuration without authentication, you must connect to the active MPU and access the BootWare menu while the MPU is starting up.

To access the device configuration without authentication, you must connect to the global active MPU and access the BootWare menu while the MPU is starting up.

Availability of BootWare menu options depends on the password recovery capability setting. For more information, see the release notes.

Examples

# Disable password recovery capability.

<Sysname> system-view

[Sysname] undo password-recovery enable

The command will disable the password recovery function. Continue? [Y/N]:

usb disable

Use usb disable to disable USB interfaces.

Use undo usb disable to enable USB interfaces.

Syntax

usb disable

undo usb disable

Default

All USB interfaces are enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

You can use USB interfaces to upload or download files. By default, all USB interfaces are enabled.

Before executing this command, use the umount command to unmount all USB file systems.

Examples

# Enable USB interfaces.

<Sysname> system-view

[Sysname] undo usb disable