Re: 標題: Re: Disable Pas

From: Shanky (shankyz@gmail.com)
Date: Tue Jul 19 2005 - 01:34:56 GMT-3


Hi,
 I think this should clarify things for you .

http://www.cisco.com/en/US/products/sw/iosswrel/ps5413/products_feature_guide
09186a00802a1e76.html
 On 7/19/05, k c <jwongccie@yahoo.com.hk> wrote:
>
> Dear All,
>
> It seems that this command is 12.3? Any other solution if the question ask
> "Disable password recovery on R1 to prevent a person with physical access
> to the router(s) from viewing the configuration file." no matter it is
> 3550 or other routers.
>
> Thanks,
>
> Julian
>
> Thomwin Chen <thomwin_chen@yahoo.com> ;!!G
> currently I don't have a router to be tested.
> but i think changing the config register is not needed. (default : 0x2102
> is ok)
>
>
>
http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123l
imit/123y/123ya8/ftnsvpwd.htm
>
> regards
>
> Godswill Oletu wrote:
> sorry, I meant setting bits 6 & 8 to 1 will yield 0x21A2
>
> Thanks.
> Godswill Oletu
>
> ----- Original Message -----
> From: "Godswill Oletu"
> To: "k c" ;
> Sent: Monday, July 18, 2005 11:08 AM
> Subject: Re: Disable Password Discovery - Urgent
>
>
> > KC,
> >
> > You might also want to set Bits 6 & 8 of the configuration register.
> > 08 Break disabled
> > 06 Ignore configuration disabled
> >
> > But in the Lab, I do not know if you are allowed to set the
> configuration
> > registers, others who have personal experience can comment on this. If
> > this is a restriction, the 'no service password-recovery' should be
> > enough....
> >
> > Read the this link especially the pre-requisite section:
> >
>
http://www.cisco.com/en/US/products/sw/iosswrel/ps5413/products_feature_guide
09186a00802a1e76.html#wp1056707
> >
> > The link above also tell you how to recover from 'no service
> > password-recovery' command, however you will lose your configurations,
> so
> > backing your configs including your vlan.dat, private-vlan.dat, etc is
> > very important before using this command in a life network.
> >
> > All things being equal, if you want to start with the default
> > configuration register's value of 0x2102 and just set bit 8 to 1 using
> the
> > that value, you will come out with:
> > eg, 0x2102 = 10000100000010 (seting bit 8 to 1 will result in)
> > 0x21A2 = 10000110100010
> >
> > So the value you will be using is 0x21A2.
> >
> > Do not panic, you are allowed to use that wonderfull tool called
> scientic
> > calculator in windows.
> >
> > http://www.cisco.com/warp/public/474/pswdrec_2500.html#topic2
> >
> > I hope this helps.
> >
> > ---
> > Godswill Oletu
> >
> > ----- Original Message -----
> > From: "k c"
> > To:
> > Sent: Monday, July 18, 2005 9:57 AM
> > Subject: Disable Password Discovery - Urgent
> >
> >
> >> Hi Group,
> >>
> >> Question:
> >> Disable password recovery on R1 to prevent a person with physical
> access
> >> to the router(s) from viewing the configuration file.
> >>
> >> I would like to know besides "no service password-recovery", should I
> >> configure the configuration register, if yes, what value should I set?
> >> Thanks.
> >>
> >> Regards,
> >>
> >>
> >> _______________________________________
> >> 7Q'Y.I&,(l7s email 3q*>!H
> >> $U8| Yahoo! Messenger http://messenger.yahoo.com.hk
> >>
> >> _______________________________________________________________________
> >> Subscription information may be found at:
> >> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> ---------------------------------
> Start your day with Yahoo! - make it your home page
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________
> 7Q'Y.I&,(l7s email 3q*>!H
> $U8| Yahoo! Messenger http://messenger.yahoo.com.hk
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Sun Sep 04 2005 - 17:00:30 GMT-3