Unfortunately this would not be quite successful (from my training at least). As with anything, if you own something that someone else has physical access to, it no longer belongs to you. There are features in the boot-loader that allows you to load from an IOS other than the one in flash. So just changing a configuration entry would not due the trick. Even if you did upload an updated version of IOS with password recovery disabled, you can still load the original IOS image from ROM. Once you do that, just follow normal procedures. As far as cracking the enable password... anything can be cracked with a matter of time. The only question is, would anyone want to put up with the trouble of cracking the password. Even then, you should be using a different password for each device so if one finds the actual password of that Cisco router, then it wont work for anything else. But, as I have said above. If you own something that someone else has physical access to, it is not yours. If this is a repeat, I am sorry.. I lost most of this thread.
Steve -----Original Message----- From: d'Ambly, Jeff [mailto:[EMAIL PROTECTED]] Sent: Thursday, April 04, 2002 10:10 AM To: 'Dave Cooper'; [EMAIL PROTECTED] Subject: RE: Cisco Password Recovery the command would be [no] service password-recovery -----Original Message----- From: Dave Cooper [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 03, 2002 1:47 PM To: [EMAIL PROTECTED] Subject: Re: Cisco Password Recovery I have actually made metal plates and screwed them over the CON port with security screws.... ( done at a school where I dont trust anyone, and closets have no control over access.... ) .... coop ----- Original Message ----- From: "Frank Quinonez" <[EMAIL PROTECTED]> To: "Shafagh Zandi" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, April 01, 2002 1:05 PM Subject: RE: Cisco Password Recovery > Put a lock on the door! > > -----Original Message----- > From: Shafagh Zandi [mailto:[EMAIL PROTECTED]] > Sent: Saturday, March 30, 2002 8:10 AM > To: [EMAIL PROTECTED] > Subject: Cisco Password Recovery > > > > > Hi, Everybody > > I've many Cisco routers and I need to protect my Cisco devices, > especially implementing the "Physical Security". > I'm thinking about Cisco password recovery, and I need to prevent others > to do this task, > How can I disable password recovery? > > > Shafagh Zandi. > www.shafagh.net > > >
