Cisco IPS-4255-K9 Installation Guide - Page 286

Recovering the Password Chapter A Troubleshooting • Recovering the AIP SSM Password, page A-10 • Recovering the IDSM2 Password, page A-13 • Recovering the NME IPS Password, page A-13 • Disabling Password Recovery, page A-14 • Verifying the State of Password Recovery, page A-15 • Troubleshooting Password Recovery, page A-15 Understanding Password Recovery Password recovery implementations vary according to IPS platform requirements. Password recovery is implemented only for the cisco administrative account and is enabled by default. The IPS administrator can then recover user passwords for other accounts using the CLI. The cisco user password reverts to cisco and must be changed after the next login. Note Administrators may need to disable the password recovery feature for security reasons. Table A-1 lists the password recovery methods according to platform. Table A-1 Password Recovery Methods According to Platform Platform 4200 series sensors AIM IPS NME IPS AIP SSM IDSM2 Description Standalone IPS appliances Router IPS modules ASA 5500 series adaptive security appliance modules Switch IPS module Recovery Method GRUB prompt or ROMMON Bootloader command adaptive security appliance CLI command Password recovery image file Recovering the Appliance Password This section describes the two ways to recover the password for appliances. It contains the following topics: • Using the GRUB Menu, page A-8 • Using ROMMON, page A-9 Using the GRUB Menu For the 4200 series appliances, the password recovery is found in the GRUB menu, which appears during bootup. When the GRUB menu appears, press any key to pause the boot process. Note You must have a terminal server or direct serial connection to the appliance to use the GRUB menu to recover the password. Cisco Intrusion Prevention System Appliance and Module Installation Guide for IPS 7.0 A-8 OL-18504-01