no service password-recovery

[MrG14]

HI

I'm working with a script to implement the command no service pasw-recovery. I need to know where the command is saved. it is not saved in the run / start but I can visualize that it works using the command Show Version, which shows the following output "The password-recovery mechanism is disabled."

If i use sh run all | i recovery i can' find it. Is it a register value?
How can i see it?

[Reza Sharifi]

Hi,

The running configuration is saved in NVRAM.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_cfg/configuration/15-sy/sec-usr-cfg-15-sy-book/sec-no-svc-pw-recvry.html

HTH

[Leo Laohoo]

Do you know the repercussion when "no service password-recovery" is enabled?

[MrG14]

let's hope so :)

[Leo Laohoo]

Just an FYI to everyone else:
"no service password-recovery" does not mean that password recovery procedure will not work.
Password recovery will still work, however, the configuration of the router/switch will be factory-defaulted in the process.
"no service password-recovery" needs to be used with extreme caution, such as classified/military/government network, because this is going to be the new "sysadmin rage quit" abuse.