RE: remove login from console line

From: Brian Dennis (bdennis@internetworkexpert.com)
Date: Mon Jan 17 2005 - 21:46:47 GMT-3


Tim,
        There is still an alternate password recovery mechanism. Search
the archives for numerous posts on this topic "no service
password-recovery".

Brian Dennis, CCIE #2210 (R&S/ISP-Dial/Security)
bdennis@internetworkexpert.com
 
Internetwork Expert, Inc.
http://www.InternetworkExpert.com
Toll Free: 877-224-8987
Direct: 775-745-6404 (Outside the US and Canada)

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
ccie2be
Sent: Monday, January 17, 2005 4:38 PM
To: Rob Laidlaw; Bircsak, Szilard; ccielab@groupstudy.com
Subject: Re: remove login from console line

What good would a back up do after the no exec commands on all lines and
the
no service password-recovery?

At that point isn't the router toast?

Tim
----- Original Message -----
From: "Rob Laidlaw" <laidlaw@consecro.com>
To: "ccie2be" <ccie2be@nyc.rr.com>; "Bircsak, Szilard"
<sbircsak@commander.com>; <ccielab@groupstudy.com>
Sent: Monday, January 17, 2005 6:50 PM
Subject: Re: remove login from console line

> now if you added
>
> no service password-recovery
>
> to the config below, then you'd have a mess on your hands if you
didn't
have
> a backup of the config.
>
> -Rob
>
> ----- Original Message -----
> From: "ccie2be" <ccie2be@nyc.rr.com>
> To: "Bircsak, Szilard" <sbircsak@commander.com>;
<ccielab@groupstudy.com>
> Sent: Monday, January 17, 2005 6:45 AM
> Subject: Re: remove login from console line
>
>
> Not that I'm suggesting that anyone do this, but what would happen if
> someone did this?
>
> line con 0
> no exec
> line aux 0
> no exec
> line vty 0 4
> no exec
>
> Is it possible to recover the router from this type of config?
>
> Would a password recovery process work to get you out of this type of
mess?
>
> TIA, Tim
> ----- Original Message -----
> From: "Bircsak, Szilard" <sbircsak@commander.com>
> To: <ccielab@groupstudy.com>
> Sent: Sunday, January 16, 2005 8:31 PM
> Subject: RE: remove login from console line
>
>
> > If that is all you want to do (and you don't want to lock the
console)
> > then just remove the 'password' and 'login' from line con 0 and it
will
> > take you straight into user mode. If want to go straight into enable
> > mode, then as Tim said just use "privilege level 15". If you don't
want
> > console access while running the IOS, turn off the exec process on
that
> > line.
> >
> > Cheers.
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> > Dong Lin
> > Sent: Monday, 17 January 2005 10:25 AM
> > To: ccielab@groupstudy.com
> > Subject: Re: remove login from console line
> >
> > That is not what I need. Currently, I have:
> >
> > line con 0
> > exec-timeout 0 0
> > password cisco
> > login
> >
> > Now, I do not want to see password prompt for login. One way to do
this,
> > I
> > think, is 1) remove password, then 2) no login. Just want to make
sure.
> >
> > ----- Original Message -----
> > From: "ccie2be" <ccie2be@nyc.rr.com>
> > To: "Bircsak, Szilard" <sbircsak@commander.com>;
> > <ccielab@groupstudy.com>
> > Sent: Sunday, January 16, 2005 6:12 PM
> > Subject: Re: remove login from console line
> >
> >
> > > If you enter the command,
> > >
> > > privilege level 15
> > >
> > > you won't have to type in enable to get to the # prompt either.
> > >
> > > HTH, Tim
> > > ----- Original Message -----
> > > From: "Bircsak, Szilard" <sbircsak@commander.com>
> > > To: <ccielab@groupstudy.com>
> > > Sent: Sunday, January 16, 2005 6:04 PM
> > > Subject: RE: remove login from console line
> > >
> > >
> > >> line con 0
> > >> no exec
> > >>
> > >> This will leave the user at the prompt:
> > >>
> > >> "Switch con0 is now available
> > >>
> > >>
> > >> Press RETURN to get started."
> > >>
> > >> And will not bring up the password prompt.
> > >>
> > >> -----Original Message-----
> > >> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On
Behalf
> > Of
> > >> Dong Lin
> > >> Sent: Monday, 17 January 2005 9:54 AM
> > >> To: ccielab@groupstudy.com
> > >> Subject: remove login from console line
> > >>
> > >> How to remove "login" from console line ? I want to disable
password
> > >> prompt
> > >> for console connection. Thanks
> > >>
> > >>
> >



This archive was generated by hypermail 2.1.4 : Wed Feb 02 2005 - 22:10:23 GMT-3