Verifying The State Of Password Recovery - Cisco IPS 7.1 Installation Manual

Recovering the Password
Password recovery is enabled by default. You can disable password recovery through the CLI, IDM, or
IME.
Disabling Password Recovery Using the CLI
To disable password recovery in the CLI, follow these steps:
Log in to the CLI using an account with administrator privileges.
Step 1
Enter global configuration mode.
Step 2
sensor# configure terminal
Step 3 Enter host mode.
sensor(config)# service host
Step 4 Disable password recovery.
sensor(config-hos)# password-recovery disallowed
Disabling Password Recovery Using the IDM or IME
To disable password recovery in the IDM or IME, follow these steps:
Step 1 Log in to the IDM or IME using an account with administrator privileges.
Choose Configuration > sensor_name > Sensor Setup > Network.
Step 2
Step 3 To disable password recovery, uncheck the Allow Password Recovery check box.

Verifying the State of Password Recovery

Use the show settings | include password command to verify whether password recovery is enabled. To
verify whether password recovery is enabled, follow these steps:
Log in to the CLI.
Step 1
Enter service host submode.
Step 2
sensor# configure terminal
sensor (config)# service host
sensor (config-hos)#
Verify the state of password recovery by using the include keyword to show settings in a filtered output.
Step 3
sensor(config-hos)# show settings | include password
password-recovery: allowed <defaulted>
sensor(config-hos)#
Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.1
E-14
Appendix E Troubleshooting
OL-24002-01