RTD Embedded Technologies, Inc.
|
www.rtd.com
23
IDAN-
ID5915 User’s Manual
Figure 18: Setting Passwords
More sophisticated access control is possible by enabling the Authentication, Authorization, and Accounting (AAA)
framework. Consult Cisco’s documentation for examples.
Enabling the CLR Button
By default, the CLR button has no effect. To enable it, the
service declassify
command must be added to the configuration. There are three
possible options:
1.
service declassify erase-nvram
= The NVRAM filesystem (which contains the router settings) will be erased. The main flash
filesystem will be left intact. Upon resetting, the router will be at the factory defaults.
2.
service declassify erase-flash
= The main flash filesystem (which contains the Cisco IOS image, VLAN data, and possibly logging
data) will be erased. The NVRAM filesystem will be left intact. Upon resetting, the router will only be able to boot to ROMMON for
system recovery.
3.
service declassify erase-all
= Both the flash and NVRAM filesystems will be erased. All data will be erased from the router, except
the ROMMON boot loader. Upon resetting, the router will only be able to boot to ROMMON for system recovery.
NOTE #1: Once service declassify has been set in the Cisco IOS
configuration, care must be taken to ensure that CLR is not pressed
accidently. If the erase-flash or erase-all options are set, the router
will no longer be bootable after pressing CLR.
NOTE #2: It is strongly recommended to make a backup of the current
configuration and Cisco IOS binary image so that it may be restored
after a declassification.
Consult Cisco’s documentation for
more
information on backing up and restoring data from the router.
Restoring Default Settings via CLI
To erase the startup configuration via the command-line interface, run the privileged EXEC command
delete nvram:startup-config
, followed
by the
reload
command. When prompted for confirmation, press Enter. The router will reboot. Once the router is booted, it will be using the
factory defaults.